{
  "id": 19225883,
  "title": "Dangerous new Gmail exploit lets hackers read your emails for a monthly fee of $1,000 — and it even works after a password reset",
  "url": "https://urgent.news/2026/11/09/dangerous-new-gmail-exploit-lets-hackers-read-your-emails-for-a",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-09T21:23:22.000Z",
  "source": {
    "name": "Tom's Guide",
    "slug": "tom-s-guide",
    "url": "https://www.tomsguide.com/computing/malware-adware/dangerous-new-gmail-exploit-lets-hackers-read-your-emails-for-a-monthly-fee-of-usd1-000-and-it-even-works-after-a-password-reset"
  },
  "original_language": "en",
  "account": "A leaked hack, called Remus Stealer, is reportedly allowing cybercriminals to gain ongoing access to Gmail inboxes for a fee of $1,000 per month. According to cybersecurity firm Hudson Rock, the tool can maintain access to victims' Gmail accounts even after they change their passwords, close their browsers, or terminate sessions. The malware provides hackers with a searchable inbox accessible through a stolen dashboard. Hudson Rock claims they spoke with the developer and a customer who used the tool, providing them with screenshots of emails, timestamps, and control over impacted mailboxes.\n\nThe email-intercepting tool allegedly bypasses Google's anti-fraud checks and interacts with browser memory. Hudson Rock's report suggests that Remus acquires reusable authorization while accessing a signed-in browser, enabling remote components to request mail after the local executable exits. However, the exact method remains unclear. Google has been contacted for comment, and Tom's Guide will update the article with any response received.\n\nWhile most users are unlikely to be affected by the hack, it could potentially target organizations, high-level individuals, or compromised mailboxes. If impacted, users are advised to isolate the infected computer, change compromised passwords on a clean device, review signed-in devices and revoke suspicious sessions, check Gmail settings for unauthorized changes, and secure other accounts that use the compromised mailbox for password resets or verification. To prevent falling victim to phishing attacks, users should remain vigilant against suspicious emails, verify sender email addresses, and install reliable antivirus software on their devices.",
  "summary": "A new tool allegedly lets attackers access Gmail accounts even after password changes and session revocation.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}