TLDR Tech / InfoSec
Google Family Link exploit that locks out victims permanently
Attackers with stolen credentials or session cookies abuse Google Family Link by editing the victim's date of birth to under 13 and linking the account to an attacker-controlled "Parent," which overrides 2FA, recovery phone, and backup email, grants the hacker location tracking and remote device lock, and leaves no automated recovery path short of YouTube (@TeamYouTube) escalation or paid Google One support.
Read the full story