@gamingonlinux probably the cookie stealing trick. Bypasses 2fa and everything.