stealing methods may include eavesdropping, prevented with secure cookies malware on-path attack Usually used for a session replay attack