DossierENTITY

session hijacking

Coverage of session hijacking in the Nexus archive.

Earliest in view: Apr 13 · 14:05 UTCMost recent: Apr 13 · 14:05 UTC

Co-mentioned in this coverage

Recent coverage

SECURITYApr 13 · 14:05 UTCBLEEPING COMPUTER
The silent “Storm”: New infostealer hijacks sessions, decrypts server-side
A new infostealer named 'Storm' bypasses local decryption by transmitting browser data to attacker servers. Varonis demonstrates how server-side decryption enables session hijacking, circumventing passwords and multi-factor authentication (MFA).