users only need to receive a verification call when they are logging in from an unrecognized computer. When logging in from a home or work computer, a cookie ca

users only need to receive a verification call when they are logging in from an unrecognized computer. When logging in from a home or work computer, a cookie can be stored so that no verification call is required." 1) Compromise targets computer using some known exploit 2) Retrieve cookie 3) Profit