Turn off Trusted Device 2FA/MFA Bypass, Always Log Out After Using Bank/Brokerage Accounts

I came across this r/FidelityInvestment Reddit post today about how a Fidelity user had their account compromised (and also eventually restored). In the discussion about how the hackers might have gained access to the account, I learned about some new dangers. I’m not a security expert, but this is my understanding after reading about “pass the cookie” or “cookie hijacking” attacks. The FBI also put out this alert Cybercriminals Are Stealing Cookies to Bypass Multifactor Authentication.

First, obviously phishing is a very com...