‼️ A threat actor is advertising a Session ID hijacking service, claiming the ability to hijack a...

Summary

A threat actor is openly marketing a Session ID hijacking service on dark web forums, claiming the ability to compromise any session with additional information for $5,000 USD paid in Monero (XMR). This represents a commoditization of account takeover attacks targeting authentication mechanisms. The service highlights the ongoing threat of session fixation and credential-based attacks in the cybercriminal underground.

Indicators of Compromise

• malware — Session ID hijacking service

Entities