Yahoo

Google, Yahoo and Microsoft on alert as hackers develop new tool that downloads entire inboxes / Digital Information World

Major digital platforms are on high alert after Google’s threat analysis team managed to uncover a tool used by hackers to download entire email inboxes.

The group revealed how popular platforms that can be targeted include Gmail, Yahoo Mail and Microsoft Outlook. This particular tool in question has been dubbed HYPERSCAPE and so far it has managed to achieve some goals that have yet to be defined.

Google says hackers are aligning themselves with state-sponsored threat groups and taking over emails sitting in inboxes. And luckily, Google’s security team managed to get a release of the tool.

At the moment, the team is working hard and running tests and simulations to see how dangerous the whole ordeal is. But so far they have seen how it has the ability to work on endpoints held by attackers.

This means that vulnerable victims don’t even need to be tricked by the threatening malware for it to do its job properly. Nevertheless, they need sensitive credentials and cookies belonging to the victims to log in. Once they are in, they can use the tool with ease.

The researchers believe that the tool works in a way that tricks the platform into assuming that the user is using outdated platforms. On that note, the email service believes it can do a better job moving to HTML. And although the new view has limited functionality, it ensures that all emails will be easily accessible.

Once the tool manages to allow the messaging service to switch to a more basic HTML version, it changes the language found in inboxes to English. This is how the tool begins its mechanism of action which is scraping.

One by one, it opens the emails and starts downloading them in a particular format. At the moment, the target user base is Iran, but many fear that others will be slow to acquire it.

Read next: Binance faces spam crisis as thousands falsely claim to work for the company on LinkedIn