Inside the Market for Cookies That Lets Hackers Pretend to Be You

Inside the Market for Cookies That Lets Hackers Pretend to Be You


Hacking. Disinformation. Surveillance. CYBER is Motherboard's podcast and reporting on the dark underbelly of the internet.


Last week Motherboard revealed that hackers stole a wealth of data from game publishing giant Electronic Arts, including source code for the Frostbite engine and FIFA 21 game. The hackers said they did this, in part, by purchasing a cookie for $10 that let them log into an EA Slack account, and then tricking EA's IT support into granting access to the company's internal network.


Now, a representative for the hackers has told Motherboard where they allegedly bought that cookie: Genesis Market, an invite-only underground site where cybercriminals can source cookies that have been lifted from hacked computers for a cornucopia of services.



Advertisement


"Can filter for sale by URL," the representative of the EA hackers said in an online chat, specifying that criminals can search for domains such as Slack or Okta, a popular cybersecurity and sign-in service designed to make access to company assets more secure.


"Example .okta.com, .enterprise.slack.com, etc," they wrote.



Have you used data from Genesis Market in a hack? Do you know anything else about the site? We’d love to hear from you. Using a non-work phone or computer, you can contact Joseph Cox securely on Signal on +44 20 8133 5190, Wickr on josephcox, OTR chat on [email protected], or email [email protected].



A handful of inside market cookies hackers pretend