4 ms·
session tokens are a fun one, that's how Linus Tech Tips (tech Youtuber) and other Youtubers got their accounts yoinked.
by thejosh 3y ago
session tokens are a fun one, that's how Linus Tech Tips (tech Youtuber) and other Youtubers got their accounts yoinked.
- zx8080 3y agoMind sharing links on what's happened?
- FirmwareBurner 3y agoSomeone from the staff opened a pdf with malware sich stole their Session tokens and bam.
- Operyl 3y agoWasn’t a PDF, straight up just regular exe. Their business unit aren’t “techies” per se like the rest of them.
- blackjpi 3y agoIn fairness, it was file extension spoofed[1] exe made to look like a PDF file. When sent to someone who frequently downloads and opens PDFs as part of their job, it would be a very easy mistake to make, especially for the unaware to this attack vector. [1] https://www.malwarebytes.com/blog/news/2016/09/lesser-known-tricks-of-spoofing-extensions https://www.malwarebytes.com/blog/news/2016/09/lesser-known-...