Session Hijacking
An attack technique in which the attacker gains unauthorized access to a user account by stealing or tampering with session tokens such as cookies. It is frequently combined with man-in-the-middle phishing to bypass multi-factor authentication.
Timeline (last 90 days)
Adversary-in-the-Middle phishing tools can proxy the real login page in real time, stealing the session cookie while the user completes MFA verification, thereby bypassing traditional MFA and forming a cross-cutting threat with session hijacking.
Common methods for obtaining credentials include phishing, info-stealing trojans, dark web credential markets, and session hijacking.
Even with MFA deployed, defenses can still be breached once a session is hijacked or credentials are stolen along with session tokens.
All Facts (3)
Adversary-in-the-Middle phishing tools can proxy the real login page in real time, stealing the session cookie while the user completes MFA verification, thereby bypassing traditional MFA and forming a cross-cutting threat with session hijacking.
50%UnverifiedCommon methods for obtaining credentials include phishing, info-stealing trojans, dark web credential markets, and session hijacking.
50%UnverifiedEven with MFA deployed, defenses can still be breached once a session is hijacked or credentials are stolen along with session tokens.
50%