It is a cookie/session stealer afaik.
This isn't a thing - websites don't just steal your cookies or sessions. Trust me. That's just not how browsers work.
I may regret saying this but please PM me if there's any further gore or hijackings or anything. It'll go to my phone so I can sort it out reasonably quickly.