1. Hijacking email:
If your verified email account is stolen or compromised, a user can enter your account freely provided they know your account name. Knowing your Shasso account password is not required as this can be reset with access to your email account. Never use the same password for both your email and Shasso account.
Hijackers can use malware to gain access to your computer and login to your account using your already authorised device. Since your Shasso account could be open or you have your account credentials saved, the hijacker does not need to know anything about your account to gain access. Using a proper anti-virus software with real time protection and avoiding unsafe websites/files will prevent malware from entering your system.