HACKERS ARE USING GOOGLE.COM TO DELIVER MALWARE BY BYPASSING ANTIVIRUS SOFTWARE

Summary from the TLDR InfoSec newsletter

Researchers from c/side are reporting on a new attack vector that abuses Google OAuth links to bypass detection. The attack begins in a compromised Magento e-commerce portal, which includes an OAuth logout with a callback parameter containing an obfuscated JavaScript payload. The code will only activate under certain conditions, such as if the URL includes the word “checkout.”