https://techeconomy.ng/sophos-show-how-attackers-exploit-stolen-session-cookies-to-bypass-multi-factor-authentication/