Skip to main content

Warning: Hackers could take over your email account by stealing cookies, even if you have multi-factor authentication (MFA)

 



Posted: November 5, 2024 by Pieter Arntz

The Federal Bureau of Investigation (FBI) has issued a warning that cybercriminals are taking over email accounts via stolen session cookies, allowing them to bypass the multi-factor authentication (MFA) a user has set up.

Here’s how it works.

Most of us don’t think twice about checking the “Remember me” box when we log in. When you log in and the server has verified your authentication—straight away or after using MFA–the server creates a session and generates a unique session ID. This session ID is stored in a session cookie (or a “Remember-Me cookie” as the FBI calls it) on your browser, which is typically valid for 30 days.

Every time you return to that website within the time frame, you don’t need to log in. That’s really convenient… unless someone manages to steal that cookie from your system.

If someone steals the session cookie, they can log in as you—even if you have MFA enabled.

This is particularly relevant for email handlers that have an online—webmail—component. This includes major players like Gmail, Outlook, Yahoo, and AOL.

With access to your email account, a cybercriminal can find a lot of useful information about you, such as where you bank, your account numbers, your favorite shops, and more. This information could then be used for targeted cyberattacks that only mention information relevant to you, leaving you more likely to fall for them.

Cybercriminals could use your account to spread spam and phishing emails to your contacts. And perhaps most worrying of all, once an attacker is in your email account they can reset your passwords to your other accounts and login as you there too.

How do these criminals get their hands on your session cookies? There are several ways.

On very rare occasions, session cookies can be stolen by you visiting a malicious website, or via a Machine-in-the-Middle (MitM) attack where a cybercriminal can intercept traffic and steal cookies if they’re not protected by HTTPS on an unsecured network.

However, session cookies are usually stolen by malware on the your device. Modern information-stealing malware is capable of, and even focuses on, stealing session cookies as part of its activity.  

How to keep your email account safe

There are a few things you can do to stay safe from the cookie thieves:

  • Use security software on every device you use.
  • Keep your devices and the software on them up to date, so there aren’t any known vulnerabilities on them.
  • Decide whether you think it’s worth using the Remember me option. Is convenience worth the risk in this situation?
  • Delete cookies, or—even better—log out when you are done. That should also remove or invalidate the session ID from the server, so nobody can use it to log in, even if they have the session cookie.
  • Only visit sites with a secure connection (HTTPS) to protect your data from being intercepted during transmission.
  • For important accounts regularly check the log in history where you can see which devices logged in when and from where. You should be able to find this option in your account settings.

Comments

Post a Comment

Please no profanity or political comments.

Popular posts from this blog

Why First Responder Credit Unions Are Built to Adopt Blockchain Faster

  For years, blockchain in financial services lived mostly in the world of experimentation—proofs of concept, pilot programs, and innovation labs that rarely touched day-to-day operations. That era is ending. Today, blockchain adoption is moving from experimentation to scale. Across payments, capital markets, and banking infrastructure, financial institutions are beginning to operate on new rails—powered by tokenized money, programmable assets, and always-on settlement models. For credit unions serving first responders, this shift presents not just a technology opportunity, but a strategic one. Blockchain Is Becoming Core Infrastructure The most important change isn’t the technology itself—it’s how it’s being used. Blockchain is no longer about testing what might work. It’s increasingly being deployed as infrastructure to solve long-standing problems in financial services, including slow settlement, trapped liquidity, manual reconciliation, and limited operating hours. Cr...
Post a Comment
Read Complete Article HERE>»

Sunday Reading - Budweiser 101

Draft Horses   Budweiser 101 Perhaps best known for its Super Bowl Clydesdale ads, Budweiser   is among the world’s most popular beer brands. It was among the first beers to achieve national distribution in the late 19th century, thanks to its revolutionary refrigeration and pasteurization techniques, setting the stage for the modern US beer industry.   Founded in the 1850s as the “Bavarian Brewery,” the company was acquired in 1860 by Eberhard Anheuser. He sold half of it to his son-in-law,  Adolphus Busch ,   in 1869, forming the partnership that would become Anheuser-Busch in St. Louis, Missouri.   In the 1870s, Carl Conrad , a St. Louis distributor, traveled through a Bohemian town called “Budweis” in German and drank a pale lager. Upon returning home, he worked with Anheuser-Busch to brew its own light lager, marketing it under the ...
Post a Comment
Read Complete Article HERE>»

Health Coverage Tailored for You! Allstate Health Solutions

Health Coverage Tailored for You!  Allstate Health Solutions At the National Council of Firefighter Credit Unions ( NCOFCU), we can help credit unions and their members find health coverage that supports their lifestyle and budget . Through our partnership with Allstate Health Solutions , you get access to flexible health plan options — including short-term medical, supplemental coverage, dental, and more — designed to fill gaps and bring peace of mind when life shifts or coverage matters most. Why choose Allstate Health Solutions?   https://ncofcu.allstatehealth.com/ Flexible health plan options — Explore short-term medical, supplemental accident, critical illness, and dental coverage that fits your needs and budget. Coverage made simple — Find and compare plans quickly with our easy online experience. Support for transitions — Ideal for periods between job-based coverage, changes in life circumstances, or when you want supplement...
Post a Comment
Read Complete Article HERE>»

Harper Issues Letter to CU Execs Outlining NCUA’s Approach to Overdraft, NSF Fees - Henry Meier, Esq

Legal and compliance expert,  Henry Meier, Esq,  says this is an “unequivocal warning” to credit unions to address the issue sooner than later. The issue of overdraft and non-sufficient funds (NSF) fees has gone from a business practice that was seen as simply part of the credit union business plan, to a topic fraught with political and social ramifications. Much of the fee debate began earlier this year when the CFPB issued a proposed rule to clamp down on banks and credit unions issuing what  Director Rohit Chopra called “junk fees.”  From there, the overdraft and NSF issue became worrisome for many credit union leaders who have or continue to have some kind of reliance on the fee income. On Tuesday, NCUA Chairman Todd Harper  posted the guidance letter  on the agency’s website that gave credit unions a very clear picture of the NCUA’s stance on its approach to overdraft and NSF fees – these fees may be a significant legal, consumer compliance, third-part...
Post a Comment
Read Complete Article HERE>»

'Tis the season for fraud! Teller questions if member fraud is suspected.

  When a credit union employee suspects a member may be subject to fraud, they should initiate a careful conversation focusing on the nature of the transaction and external influences. The goal is to help the member identify red flags without the employee asking for sensitive personal information that the credit union should already have on file.  Initial Verification Questions    .pdf Before discussing the specifics of the suspicious activity, the employee should confirm the member's identity in accordance with established internal protocols.  Questions About the Transaction/Activity If the member confirms they are conducting a suspicious transaction (e.g., a large wire transfer or purchase of gift cards ), the employee should ask questions to help the member pause and think critically:  "What is the purpose of this transaction?" "Do you personally know the person or business you are sending money to?" "Have you ever met the...
Post a Comment
Read Complete Article HERE>»

Advice On Winning Over Gen Z In ’25

NEW YORK—As 2025 approaches the close of Q1, how can credit unions win over Gen Z? By tailoring credit rewards for a digital-first generation, a new report recommends. Gen Z is reshaping the workforce and redefining financial behaviors. As of 2024, this generation is poised to surpass Baby Boomers in workforce size and will make up 30% of the workforce by 2030. This rapid growth presents a major opportunity for financial institutions to tap into a younger, digitally native audience with distinct spending habits and financial needs, emphasized a GlobalData report authored by Zachary Johnson, specialist, campaign execution & strategy, financial services at VDX.tv. “Unlike previous generations, Gen Z’s economic journey has been shaped by inflation and delayed career starts due to the pandemic and skyrocketing living costs. These factors have made them highly dependent on credit, with Gen Zers being 23% more likely to own a credit card than Millennials at the same age, and carrying...
Post a Comment
Read Complete Article HERE>»

NCUA: More than $1.3 Million will be Available; Applications Due by May 22

ALEXANDRIA, Va. (April 13, 2020) – Recognizing the immediate needs of credit unions and their members in the COVID-19 pandemic, the National Credit Union Administration is committing the majority of the 2020 Community Development Revolving Loan Fund appropriation for COVID-19 assistance. “The NCUA recognizes that federally insured credit unions will face unpredictable challenges and costs as a result of the COVID-19 pandemic,” NCUA Chairman Rodney E. Hood said. “The increase in available grant funding will help more low-income credit unions to continue offering quality and affordable financial services to their members and communities. I encourage all eligible credit unions in need to consider applying for these grants as a means to ensure service to their members.” The agency is committing $1,375,000 for grants to eligible low-income credit unions, an increase of $575,000 from the $800,000 originally announced on March 31. This funding will supplant the traditional Community Developm...
Post a Comment
Read Complete Article HERE>»

What Does PTSD in a Firefighter Look Like? A New Brain Scan Can Show You

Link Post-traumatic stress disorder (PTSD) is often described as one of the invisible scars that firefighters and others accumulate after years of dealing with trauma in their jobs. Now the scars are invisible no longer. A new tool—the SPECT scan—is offering a new way for firefighters and others with PTSD to visualize their injuries. SPECT stands for single photon emission computed tomography, and it creates 3-D scans of the patient’s brain that look at blood flow and brain activity, KTLA reports. Those scans can then be used to generate a treatment plan tailored to the specific patient based on the visual effects of PTSD. Retired Firefighter-Paramedic Matthew Fiorenza, a PTSD sufferer, told the station that the scans also help make the illness more tangible. “Looking at a picture of my brain, it just took the stigma out of it,” he told KTLA. “It’s like, okay, I’m not crazy.”  
Post a Comment
Read Complete Article HERE>»

Letter to Credit Unions (24-CU-03) Consumer Harm Stemming from Certain Overdraft and Non-Sufficient Funds Fee Practice

      Letter to Credit Unions (24-CU-03) Consumer Harm Stemming from Certain Overdraft and Non-Sufficient Funds Fee Practices Dear Boards of Directors and Chief Executive Officers: If your credit union assesses overdraft or non-sufficient funds (NSF) fees that your members cannot reasonably anticipate or avoid, your credit union may be exposing itself to heightened reputational, consumer compliance,...
Post a Comment
Read Complete Article HERE>»

Chairman Hauptman’s Remarks for FLEC Public Meeting (Trump Accounts)

  As Prepared for Delivery on February 6, 2026 Meeting Focus: Implementation and Outreach for Trump Accounts Good morning and thank you to our colleagues at the U.S. Department of the Treasury and members of the Financial Literacy and Education Commission for convening today’s important discussion. I also want to express my appreciation for this body’s leadership in encouraging savings and advancing the broader goal we all share—ensuring that every American has a meaningful opportunity to build financial capability, resilience, and long-term financial security. There’s a lot to like about Trump Accounts, including how easy it is to start the process when filing your taxes. These accounts were clearly designed with behavioral economics in mind. That is to say, things that are easier to do are more likely to get done. Trump accounts also turn all these kids into investors. The more Americans that identify as investors, the better off we are. Investing done by regular people turns Mar...
Post a Comment
Read Complete Article HERE>»