News for hackers. Stuff that matters.

A comment on Hackers used Slack to break into EA Games. Parent comment

Re:Hackers used Slack to break into EA Games by bredren on Friday June 11, 2021 @11:54PM (#27481390)
The stolen cookies imply full access to one of the employees machines.

How is something like this advertised on forums?

Valid auth token for employee at EA Games for sale? Does it list the expiration? Refunds if it isn’t valid at time of sale?

[ Parent | on HN ]
Re:Hackers used Slack to break into EA Games by fierro on Saturday June 12, 2021 @09:10PM (#27488904)
nah not to the full machine. This is just a Slack token. Someone basically had the employee click on something with XSS or some other way to steal cookies (idk there's a bunch of ways you can steal cookies out of someone's browser)
[ Parent | on HN ]