Click your icon in the browser toolbar.

A hacker creates a fake "Netflix password cracker" software or a browser extension promising free access. When a curious user installs it, the malware scans their browser’s local storage and uploads all active session cookies to a remote server. The victim doesn’t even know their cookies have been stolen.

Here's how they typically work:

The first ten minutes were glorious. Explosions in Dolby Vision. Crisp dialogue. Then, at the 11-minute mark, the screen flickered. The audio stuttered. A strange, low-frequency hum replaced the spaceship engines.