It wasn't me guv, burp

CookieMonster nabs user creds from secure sites | The Register