They cloned your browser sessions and cookies. So they have a cloned access to your email, x etc.. whatever you’re logon to