JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Cybersecurity researchers have analyzed JSCeal, a complex malware that can harvest credentials and intercept traffic. It has the capability to bypass Google authentication by using stolen session cookies. The malware is a compiled V8 JavaScript malware with surveillance capabilities. Its payloads are protected through various obfuscation techniques, including encryption and control-flow flattening. This protection makes the malware's code difficult to understand and analyze. The researchers at Check Point Research have been studying the malware's sophisticated techniques.