● Covered by 1 source · 1 reportMedium impact1 neutral
Cookie Theft Allows Fraudsters to Bypass MFA and Access Accounts
Key points
- Session cookies are targeted by hackers to bypass login security.
- Stolen cookies allow access without passwords or MFA.
- Malware on a device typically facilitates cookie theft.
- 52 billion stolen cookies were identified circulating online.
Understanding Cookie Theft
Cookie theft is a form of session hijacking where fraudsters steal active session cookies from a user's device. These cookies are temporary data files that allow users to navigate websites without repeatedly entering login details. Once stolen, an active session cookie grants attackers the same access as the legitimate user, effectively bypassing passwords and multi-factor authentication (MFA).
Mechanism of Attack
The primary method for cookie theft involves malware. When a user inadvertently downloads malicious software, it can access the browser's database, extract active session cookies, and transmit them to the attacker. This allows the fraudster to take over an active session without needing the user's login credentials or triggering security alerts.
Marijus Briedis, CTO at NordVPN, stated that 52 billion cookies in stolen data were found circulating online in the year leading up to June, highlighting the scale of this threat.
Impact on Users
Victims of cookie theft may not immediately realize their accounts have been compromised. Attackers can use stolen cookies to access bank accounts, social media profiles, email, or online shopping accounts. This unauthorized access can lead to financial fraud, identity theft, or the use of compromised accounts for further scamming activities.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Fraudsters are increasingly targeting session cookies to gain unauthorized access to user accounts, bypassing traditional login credentials and multi-factor authentication. This method, known as session hijacking, allows attackers to impersonate users by stealing active session cookies from compromised devices.