The Thieves Who Skip Your Password and Your Two-Factor Code

📰 Medium · Cybersecurity

Learn how infostealers like Lumma bypass passwords and two-factor authentication, and why traditional security measures are no longer enough

intermediate Published 19 Jun 2026

Action Steps

Understand how infostealers like Lumma work and how they bypass traditional security measures
Use a password manager to generate and store unique, complex passwords for each account
Enable two-factor authentication (2FA) using a method that is not vulnerable to infostealer attacks, such as a physical token or a biometric authentication method
Keep software and browsers up to date with the latest security patches
Use a virtual private network (VPN) to encrypt internet traffic and protect against eavesdropping and interception

Who Needs to Know This

Security teams and individuals responsible for protecting online accounts and sensitive information can benefit from understanding the tactics used by infostealers like Lumma, to improve their security measures and protect against these types of attacks. This knowledge can help them stay ahead of emerging threats and develop more effective security strategies.

Key Insight

💡 Infostealers like Lumma can steal the 'you're already signed in' token held by browsers, allowing them to bypass passwords and 2FA

Key Takeaways

Learn how infostealers like Lumma bypass passwords and two-factor authentication, and why traditional security measures are no longer enough

Full Article

Title: The Thieves Who Skip Your Password and Your Two-Factor Code

URL Source: https://medium.com/@Pop123/the-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2?source=rss------cybersecurity-5

Published Time: 2026-06-19T14:16:04Z

Markdown Content:
# The Thieves Who Skip Your Password and Your Two-Factor Code | by Pop123 | Jun, 2026 | Medium

[Sitemap](https://medium.com/sitemap/sitemap.xml)

[Open in app](https://play.google.com/store/apps/details?id=com.medium.reader&referrer=utm_source%3DmobileNavBar&source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

[](https://medium.com/?source=post_page---top_nav_layout_nav-----------------------------------------)

Get app

[Write](https://medium.com/m/signin?operation=register&redirect=https%3A%2F%2Fmedium.com%2Fnew-story&source=---top_nav_layout_nav-----------------------new_post_topnav------------------)

[Search](https://medium.com/search?source=post_page---top_nav_layout_nav-----------------------------------------)

Sign up

[Sign in](https://medium.com/m/signin?operation=login&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&source=post_page---top_nav_layout_nav-----------------------global_nav------------------)

![Image 1: Unknown user](https://miro.medium.com/v2/resize:fill:32:32/1*dmbNkD5D-u45r44go_cf0g.png)

# The Thieves Who Skip Your Password and Your Two-Factor Code

[![Image 2: Pop123](https://miro.medium.com/v2/resize:fill:32:32/1*K8lltGxsW3l9BXr7XWzbJQ@2x.jpeg)](https://medium.com/@Pop123?source=post_page---byline--235fa8a8eea2---------------------------------------)

[Pop123](https://medium.com/@Pop123?source=post_page---byline--235fa8a8eea2---------------------------------------)

Follow

9 min read

·

Just now

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fvote%2Fp%2F235fa8a8eea2&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&user=Pop123&userId=30b91e24d26e&source=---header_actions--235fa8a8eea2---------------------clap_footer------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Frepost%2Fp%2F235fa8a8eea2&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&user=Pop123&userId=30b91e24d26e&source=---header_actions--235fa8a8eea2---------------------repost_header------------------)

[](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2F_%2Fbookmark%2Fp%2F235fa8a8eea2&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&source=---header_actions--235fa8a8eea2---------------------bookmark_footer------------------)

[Listen](https://medium.com/m/signin?actionUrl=https%3A%2F%2Fmedium.com%2Fplans%3Fdimension%3Dpost_audio_button%26postId%3D235fa8a8eea2&operation=register&redirect=https%3A%2F%2Fmedium.com%2F%40Pop123%2Fthe-thieves-who-skip-your-password-and-your-two-factor-code-235fa8a8eea2&source=---header_actions--235fa8a8eea2---------------------post_audio_button------------------)

Share

_Infostealers like Lumma don’t crack your login. They steal the ‘you’re already signed in’ wristband your browser holds — and with it, your password and your 2FA simply stop mattering._

Press enter or click to view image in full size

![Image 3](https://miro.medium.com/v2/resize:fit:700/1*kyr4VcGrEEHmTkVpwEZ1bw.jpeg)

Picture a festival with a strict entrance. To get in, you show ID, then a guard checks your ticket against a list, providing two separate proof

Read full article → ← Back to Reads

The Thieves Who Skip Your Password and Your Two-Factor Code

Key Takeaways

Full Article

Related Videos