ToddyCat Uses Umbrij Malware To Abuse OAuth Tokens And Access Gmail Via Google API
Security researchers have identified Umbrij malware used by ToddyCat APT to exploit OAuth tokens and browser sessions via Google API, enabling covert access to Gmail corporate communications.