Hide Navigation Hide TOC

Injected Code — Browser Cookie / Session-Token Theft - ATR-2026-01894 (cff982d9-71f7-5072-947b-d32418d0067e)

Detects injected code that loads a local cookies.txt jar (or passes a loaded cookie jar) into an outbound request, hijacking the victim's authenticated sessions. Session-token theft enables account takeover without the password.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Injected Code — Browser Cookie / Session-Token Theft - ATR-2026-01894 (cff982d9-71f7-5072-947b-d32418d0067e)	Agent Threat Rules	LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9)	MITRE ATLAS Attack Pattern	1
Injected Code — Browser Cookie / Session-Token Theft - ATR-2026-01894 (cff982d9-71f7-5072-947b-d32418d0067e)	Agent Threat Rules	LLM Data Leakage (45d378aa-20ae-401d-bf61-7f00104eeaca)	MITRE ATLAS Attack Pattern	1