Telecom
Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals
Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.
In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.
Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.
“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”
Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.
Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.
Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.
Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.
Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.
Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.
The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.
“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.
“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”
To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.
Telecoms giant, MTN Nigeria, has announced the disbursement of over ₦290 million to more than 1,500 winners in its ongoing Mega Billion Promo.
L-R: Deji Roberts, Assistant Director, Nigerian Communications Commission, Lagos Zonal Office; Ugonwa Nwoye, Chief Customer Relations and Experience Officer, MTN Nigeria; Femi Yusuf, 10 Million MTN Mega Billion Promo Jackpot Winner; Efe Kwado, MTN Mega Billion Promo Winner; Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria and Samuel Rowland, Chief Operations Officer, Lagos State Lotteries and Gaming Authority at the MTN Mega Billion Promo Media Parley held on Saturday, July 19, 2025 at the MTN Rooftop Events Centre Plaza, Ikoyi.
The update was shared during a live event held on July 19 at the company’s Rooftop Events Centre in Lagos. Representatives from the Nigerian Communications Commission (NCC), the Lagos State Lotteries and Gaming Authority, MTN executives, journalists and selected promo winners were in attendance.
Speaking at the event, Onyinye Ikenna-Emeka, MTN’s Chief Marketing Officer, stated that the initiative was launched to support loyal customers during difficult times. “In the last couple of years, it’s been a tough time for the average Nigerian. This promo is one of our ways of making life better for our customers,” she said.
Ikenna-Emeka revealed that the promo has produced over 1,500 winners, including three jackpot winners, 20 winners of ₦5 million each, and more than 100 winners of ₦100,000. She added that the company remains committed to rewarding customers transparently.
One of the jackpot winners, Femi Yusuf, who won ₦10 million, shared his excitement. “I thought it was one of those promos where nothing comes out of it. My wife was the one who spotted my number during the live draw,” he said. When asked about the delivery of his prize, he replied, “Fast and fast. MTN, no scam.”
The event also featured live calls to new winners, including a woman identified as Motunrayo, who won ₦2 million. She expressed joy over the unexpected win, saying, “I’m so grateful. Thanks so much.”
Debo Agun, Senior Manager, Consumer Segment (Mass Market), explained the mechanics of the promo. He said participation is free and open to MTN subscribers who dial *900# to opt in. Airtime purchases serve as entries—₦100 worth of airtime equals one entry, and customers can win multiple times.
Agun stated that 63 winners are selected daily from Monday to Friday, while Saturdays feature 104 winners, including a ₦10 million jackpot. Other prizes range from ₦25,000 to ₦2 million and are paid into customers’ MoMo wallets. Those without wallets can create one by dialing *671#.
Promo draws are conducted and streamed live on MTN’s Instagram, YouTube, and Facebook channels. Independent partners oversee the process to maintain credibility and fairness.
The promo began on June 23 and runs for 90 days.
MENXTT Technology NG has introduced a fresh lineup of USA-specification smartphones alongside its existing range of laptops, accessories, and software tools in a major move to redefine tech quality and customer satisfaction in Nigeria.
The firm, which operates as a fully online IT service provider, is focused on bridging the gap between businesses and customers by offering seamless tech procurement, deployment, and after-sales support.
According to Anthony Emeka Nwosu, Director of Communication and Customer Retention, the company is committed to restoring consumer trust in tech purchases through guaranteed quality, extended warranties, and structured support.
Nwosu stated that the decision to supply USA-grade devices was borne out of frustration with substandard options in the market and zero accountability.
He said MENXTT was built to be responsive, dependable, and quality-driven, assuring customers that they would not be left alone after purchase.
With services covering laptops, accessories, website development, software deployment, and IT support, MENXTT promises to take technology directly to the client with less stress.
The company, located at 8a Oje Imeviani Street, Julie Estate, Oregun, Ikeja, Lagos, is also noted for its tech-enabled structure that allows users to access solutions from anywhere in Nigeria through its online platform.
Customers can reach MENXTT Technology NG via email: info@menxtt.com.ng or website: menxtt.ng.
Telecoms giant MTN Group has partnered with MTV Base to launch the Room of Safety campaign, a youth-led movement aimed at raising awareness on internet safety and digital wellbeing for children and young people across Africa.
The initiative, a major part of MTN’s Help Children Be Children campaign, seeks to address growing concerns around cyberbullying, grooming, misinformation, and other forms of online harm. Through this collaboration, MTN will leverage MTV Base’s extensive reach across youth audiences to drive impactful change.
Central to the campaign is the premiere of a 10-part short-form docu-series titled Room of Safety, which kicks off on July 20, 2025, at 16:00 on MTV Base (DStv channel 322). Episodes will also stream on MTV Base South’s digital platforms including Instagram, YouTube, and TikTok.
Each episode will feature real-life stories, expert interviews, and practical resources to help young viewers identify digital threats and take proactive steps. The series also encourages youth to speak up about negative experiences online and shows them how to report abuse.
A statement from MTN Group emphasized the importance of equipping young Africans with the knowledge and confidence to navigate digital spaces safely, adding that the campaign aims to normalize conversations around digital ethics and mental health within families, schools and peer groups.
The launch is backed by social media engagement and outreach activities targeted at schools, creators, and community organizations across multiple African countries.
Microsoft Server Hack Likely Solo Actor, Thousands at Risk
CSCS Inaugurates Custodian Portal to Enhance Digital Access, Operational Efficiency
Reps Investigate 25 Insurance Firms for Financial Infractions
Flaw in Microsoft SharePoint Sparks Global Cybersecurity Concern
Naira Slides Again, Hits ₦1,532.34/$ Despite CBN’s Dollar Push
General News2 days agoPrateek Suri CEO Maser Meets Zambia’s Education Minister to Propel Student Housing and Education Projects
News1 day agoUN Appoints Sa’id, Nigerian to Nuclear Panel
E-Financial1 day agoUBA’s LEO Becomes Africa’s First Chatbot to Enable Cross-Border Payments
E-Business1 day agoNIMC Enrolls 122m for NIN, Cuts Extortion by 40 Percent
Telecom1 day agoMTN Urges Nigerian to Regards Telecom Infrastructure as National Assets
General News1 day agoAppeal Court Nullifies Registration of ‘KPMG Professional Services’
E-Financial1 day agoPolaris Bank Equips 500+ Journalists with Digital Tools for Modern Storytelling
E-Financial1 day agoSEC to Introduce USSD Codes to Fight Ponzi Schemes