Threats due to Cookies

Cookies are small pieces of data a website asks your browser to store, and their usual job is to make your browsing smoother — remembering logins, preferences, or items in a cart. In that normal role, they are harmless and do not carry malware. The trouble begins when cookies are misused, disguised, or created by parties you never directly visited. The book walks through the main threats in a clear order, starting with the benign baseline and then layering on the dangers.

First, the reassuring part: ordinary cookies do not infect your computer with malware. They are just text files, not executable programs. So the everyday cookie that remembers your language preference or keeps you logged in is not a security risk by itself. The threat comes from specific abnormal kinds of cookies and from how some cookies are used behind the scenes.

The first danger is a supercookie. This is malware that disguises itself as a cookie. Unlike a normal cookie, which is a simple data file, a supercookie carries malicious code and can behave like a small program. Because it looks like an ordinary cookie, a user might accept it without suspicion, and it can then cause real harm to the system.

The second danger is a zombie cookie. The name tells you the behaviour: even after you delete it, it gets recreated. A zombie cookie leaves a copy of itself somewhere else on your system, so when you clear your cookies, it simply regenerates from that hidden backup. This makes it very difficult to remove permanently and means your browsing data can persist against your wishes.

The third threat comes from third-party cookies. These are not set by the website you are actually visiting, but by a different domain embedded in that page — typically an advertiser or a tracking service. The book's warning is specific: some third-party cookies share user data without the user's consent, for advertising or tracking purposes. The consent part matters — the data sharing happens silently, without you agreeing to it. …