Once the cookie is nabbed, they bypass all the security measures(not always true, some clever designs kept unauthorized access from happening even with cookie stolen). Cookies act like a token to remember your login specifically with a very, very long encrypted code for it. If that ends up in wrong hands, cookie thieves snatch your accounts. ![]()
If the cookie logger is somehow still enabled on your device, the attacker can access the logged cookies on their machine from the inputs.