Dangerous new Gmail exploit lets hackers read your emails for a monthly fee of $1,000 — and it even works after a password reset

A leaked hack, called Remus Stealer, is reportedly allowing cybercriminals to gain ongoing access to Gmail inboxes for a fee of $1,000 per month. According to cybersecurity firm Hudson Rock, the tool can maintain access to victims' Gmail accounts even after they change their passwords, close their browsers, or terminate sessions.

The malware provides hackers with a searchable inbox accessible through a stolen dashboard. Hudson Rock claims they spoke with the developer and a customer who used the tool, providing them with screenshots of emails, timestamps, and control over impacted mailboxes.

The email-intercepting tool allegedly bypasses Google's anti-fraud checks and interacts with browser memory. Hudson Rock's report suggests that Remus acquires reusable authorization while accessing a signed-in browser, enabling remote components to request mail after the local executable exits. However, the exact method remains unclear. Google has been contacted for comment, and Tom's Guide will update the article with any response received.

While most users are unlikely to be affected by the hack, it could potentially target organizations, high-level individuals, or compromised mailboxes. If impacted, users are advised to isolate the infected computer, change compromised passwords on a clean device, review signed-in devices and revoke suspicious sessions, check Gmail settings for unauthorized changes, and secure other accounts that use the compromised mailbox for password resets or verification.

To prevent falling victim to phishing attacks, users should remain vigilant against suspicious emails, verify sender email addresses, and install reliable antivirus software on their devices.