A session stealer is when you visit a site and it steals your session id and sends it to an email or writes it to a text file. Then the scammer types a little js code into the address bar, with the persons session id in and gains access to there account.
And its patched now



Reply With Quote
8), 


