Rather than stealing your password so they can log in to your Facebook account, won't these state sponsored hackers just steal the authentication cookie that yo

Rather than stealing your password so they can log in to your Facebook account, won't these state sponsored hackers just steal the authentication cookie that your browser sends to show that it's been authorized by MFA?