Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
The malicious JavaScript makes requests to SecureBank's API endpoints. Because Vic is still logged in, his browser automatically includes his authentication cookies with these requests.