Hi, I became a victim of cookie/session theft a couple of days ago. I didn't clear my Chrome's cookies for a while, so it had many stored logins to the websites.
My accounts are 2FA, or all security parameters are always turned on. Once I figured out what was happening, I reset my mobile and re-installed my Windows.
After that, I changed the passwords of all the websites and revoked all the old sessions from the accounts.
After the fresh start, I didn't use any cracked stuff or visit any website; my MalwareBytes told me not to.
For the past few days, everything was going fine, so I saved my logins of Yahoo and Facebook to Chrome, but today I received a couple of login attempts for Facebook; I was getting an authentication code (which shows someone was trying to log in with the correct password). I immediately checked Yahoo, and there were 3-4 devices added to my account.
How is this happening? What is the possible reason that my cookies are being stolen? When I cleaned everything, doing everything safely, how could this be happening?
I need an expert opinion to take countermeasures and remove it permanently, please. I am tensed because of this.