ATK

Session hijacking

Stealing or reusing a valid login session token so an attacker can act as an already-authenticated user without needing the password.