MASTR 支持这项工作

← 知识库首页

诈骗模式

Session-cookie theft

A browser session is stolen after authentication.

Reference note · Sources below

研究文章和参考条目以英语发布。导航提供七种语言。

本文目录

Overview
Why it matters
What to check
Sources

Overview

A browser session is stolen after authentication.

Why it matters

The cookie can provide access without another password or MFA challenge.

What to check

Revoke active sessions, inspect extensions and preserve access logs.

Sources

相关阅读

Web 基础

Session theft: account access without another password prompt

An authenticated session can become a separate credential worth protecting and revoking.

诈骗模式

Clone tokens and ticker theft

A token copies the symbol and branding of a known asset.

诈骗模式

Exchange API-key theft

A fake portfolio or bot collects exchange API credentials.

诈骗模式

Trading-bot key theft

A bot asks users to import a private key or recovery phrase.