I had heard of something that can surreptitiously allow scammers to hijack sessions, allowing them to login without knowing a user's credentials. This video tells more about it and ways to protect your sessions. Although it is mostly focused on Windows, it's good to be aware of this, especially if you help support family and friends. c