However, the source code for today's attack was quickly found on at least two code-sharing websites. APT28 is one of the two Russian groups that hacked into the Democratic National Committee's email servers during the 2016 U.S. Tait added that the ongoing attack was very similar to a spear-phishing campaign last year carried out by APT28, aka Pawn Storm or Fancy Bear, and documented by the Tokyo-based security firm Trend Micro in a recent report. MORE: Best Antivirus - Top Software for PC, Mac and Android Malicious hackers love stealing 0Auth tokens because they can be reused until the user completely logs out of an account on all devices. Likewise, if you keep a browser logged into a Twitter account indefinitely, that's OAuth at work.

(Update: It turns out Google uses a proprietary mechanism for that.) For example, when you log into Gmail on one Chrome tab, then open another tab to open Google Drive, a 0Auth 'token' logs you into the second tab's content automatically. 0Auth is a widely used credentialing standard that keeps you logged into accounts for a long period of time, and can also be used across accounts.

Google drive spam reddit