The Hacker News6h agoenergy 98
Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
image: The Hacker News
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the operator designed it that way on purpose. The Threat Research team at Material Security spotted the campaign and has since taken down hundreds of attacker domains in an effort the team calls Operation CloudFire.
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.