LTT Channel Hacked: Details
2023 Mar 25
Session Hijacking Details When you login to a website, it will generate a session or a token, depending on how the server is setup. If you check the “Remember me” box on the login form, it will keep the session or token in as persistent, and your browser will download it. After that, you can then go to said website, and the server will request from your computer the session, or will verify the token that your web browser has on file, then log you in if that’s valid.
Where session hijacking comes into play is when said session ID or token is copied to another endpoint via malware (malicious software or firmware) typically. There are other means of copying said session ID’s or tokens, including manually, but a major channel on Youtube got hijacked with the malware method as it is the most common currently.