Malware4 min read
ToddyCat Deploys Umbrij to Steal Gmail Access via OAuth Hijacking
Kaspersky uncovers Umbrij, a .NET tool used by APT group ToddyCat to steal Gmail OAuth tokens through browser remote debugging—no credentials needed.
James RiveraJul 7, 2026