Attackers steal an authentication token and reuse (“replay”) it to impersonate the original user.
Why it matters:
- Works even if the password is reset.
- Commonly used during MITM attacks.
Pro tip: Use encrypted channels, token expiration, and nonce validation to stop replay attacks.
« Back to Glossary Index