Skip to content
AI Security

session theft

AI security interview questions tagged session theft, across every topic.

2 questions · 0 unlocked for you
Open full answer →
Open full answer →

Concepts behind "session theft"

Explanations of the mechanisms these questions rely on.

Foundational
Detection & Response
Infostealers and Session TheftInfostealer malware collects saved passwords, session cookies, tokens and developer credentials from a machine and uploads them as a log that is sold to people who specialise in breaking into organisations. Stolen session cookies represent logins that already passed MFA, so they can be replayed without a password or second factor. Defences make stolen secrets worthless (phishing-resistant MFA, short and device-bound sessions, no long-lived keys on endpoints), keep work access on managed devices, harden endpoints against lures such as ClickFix, and monitor stealer-log intelligence so sessions are revoked before buyers act.
Explore the full curriculum →