Steal Web Session Cookie T1539
An adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials. Web applications and services often use session cookies as an authentication token after a user has…
- Tactics
- Credential Access
- Actors using it
- 8
- Sub-techniques
- 0
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- Sandworm TeamRussia · ELECTRUM, Telebots, IRON VIKING · 64 techniques
- Scattered SpiderRoasted 0ktapus, Octo Tempest, Storm-0875 · 50 techniques
- APT42Iran · 29 techniques
- LuminousMothChina · 24 techniques
- Lotus BlossomDRAGONFISH, Spring Dragon, RADIUM · 17 techniques
- Star BlizzardRussia · SEABORGIUM, Callisto Group, TA446 · 16 techniques
- Evilnum11 techniques