Even cloud infrastructures rely on cookies to authenticate their users.

It’s not a surprising target for hackers given that the vast majority of activities are now web-based. Ransomware groups also harvest cookies and “their activities may not be detected by simple anti-malware defenses because of their abuse of legitimate executables, both already present and brought along as tools.” The “cookie-stealing cybercrime spectrum” is broad, the researchers wrote, ranging from “entry-level criminals” to advanced adversaries, using various techniques.Ĭybercriminals collect cookies or buy stolen credentials “in bulk” on dark web forums. The new attack method, reported by Sophos researchers yesterday, is already growing in use.

One new tactic hackers have been using is to steal cookies from current or recent web sessions to bypass multi-factor authentication (MFA). Learn More.Ĭyber attackers continue to up their game. We may make money when you click on links to our partners. ESecurity Planet content and product recommendations are editorially independent.