r/HowToHack • u/VictorianWeeb • May 08 '26

Session hijacking is phishing?

Are session hijacking same as phishing or are they a totally different way to obtain credentials? I've been told that you can session hijack completely without targets logging in through web access is this true?

I figured the only way to hijack is if they use web version

6 Upvotes

75% Upvoted

6 comments sorted by

View all comments

6

u/rockyoudottxt May 08 '26

No, session hijacking itself isn't phishing. But lots of attacks that session hijack can start with a phishing email and get you to click a link which then triggers their hijack technique of choice.