Google warns users to protect their inbox as new hacking tool threatens to expose your private information

Cybersecurity researchers say Remus Stealer, an infostealer tool advertised to criminals, offers a way to access victims’ Gmail inboxes through a control panel. If the claims hold, changing a password alone may not end access, and compromised email could expose messages or help attackers reach other online accounts.

Hudson Rock reviewed the software’s promotional material and spoke with a user who said access continued after a password change and browser closure; researchers have not independently confirmed that claim after all sessions are revoked. The service is advertised for $1,000 a month and claims to intercept verification codes and share mailbox access. Google advises removing malware and revoking active sessions, while researchers recommend checking account settings, forwarding rules, recovery options and third-party app permissions.