Attacks and malware
What is Session hijacking?
Taking over a logged-in session by stealing its session cookie or token, which lets the attacker skip the password and multi-factor login.
Session hijacking is taking over a user's already authenticated session, usually by stealing the session cookie or token that a website or cloud service issued after login. The attacker then presents it as their own.
Since the login and multi-factor step already happened, the stolen token often works without any further checks. Infostealers and adversary-in-the-middle phishing are the main sources of stolen sessions.