In computer security, as account takeover (ATO) happens when an attacker uses vulnerabilities to take control of a victim's user account, allowing the attacker to perform functions on the victim's behalf. Account takeover can be the result of theft of session tokens, credential stuffing, malware, insecure design of access controls, or social engineering.
{{cite journal}}: CS1 maint: periodical has ISBN (link)