token grabbing

The act of using malware or social engineering to illicitly obtain an authentication token, specifically for services like Discord, allowing an attacker to bypass multi-factor authentication and gain full access to an account.