Adversaries can use stolen session cookies to authenticate to web applications and services.

Tactics
TA0005 TA0008

Sub-technique of
T1550


See: MITRE ATT&CK