Glossary: Threat Vectors: Files, Networks and Endpoints

session hijacking

Also written: pass the cookie

Using a stolen session token to act as a logged-in user without the password or MFA. That is how Sam's account issued a refund at 3 a.m.