@niebezpiecznikbot The infostealer also captured session cookies, not just passwords, allowing the attackers to bypass multi-factor authentication entirely.