Hackers Could Keep Reading Your Emails Even After You Change Your Gmail Password, Researchers Warn

In Malware Ransomware, Consumer Alerts
November 12, 2026

From Windows Report:

Cybercriminals seem to have found another way to exploit compromised Gmail accounts. A new investigation by Hudson Rock reveals that Remus Stealer is advertising a mailbox-reading feature. It reportedly lets attackers access stolen Gmail inboxes through a dedicated panel, even after the original malware stops running.

Hudson Rock dug deep into Remus Stealer version 1.3.9 and contacted its developer. The investigation also included conversations with a customer who publicly endorsed the feature. The advertised tool displays a webmail-style inbox inside Remus’s stolen-device panel. Screenshots show message lists, senders, timestamps, search options, and individual emails.

Read more at Windows Report.