A Critical Google Cookies exploit involves manipulating or stealing user cookies, which store authentication information, to gain unauthorized access to accounts.  Hackers exploit this illicit mechanism to:- Impersonate users Hijack sessions Gain control over sensitive information Gain unauthorized access to websites Gain unauthorized access to applications A developer, PRISMA, discovered a major Google cookie exploit in Oct 2023 that allows persistent access post-password reset. A threat actor later integrated it into Lumma Infostealer, causing a ripple effect across malware groups.

Source: GBHackers