Cookies were stolen, is it possible through a regular page?

Question

PHP

Good afternoon.
Accidentally, a link came to VK -
open in incognito mode
is not advertising
vk.com/away.php?to=http%3A%2F%2Fdl.dropbox.com%2Fs%2Fdg5gr1d1nrwomo9%2Fsasfastyw.html%3FJpJndU
So, friend, from whom came the link was hacked. He says that he did not enter anything on the site. That is, open and exit.
Is it possible to steal cookies in this way?
In the code of that site, I noticed 2 pictures that have a very strange src parameter. The same site, most likely, is intended for suckers, who, in turn, must enter their username and password on a fake site, and the attacker will receive their data. Standard scheme. But the friend claims he did nothing of the sort.
Here is a similar question.
I will be grateful for help.

Answer 1

Cookies cannot be stolen through the browser in a known way. But there are always all sorts of 0-day vulnerabilities. But, most likely, here is a standard hacking method, like entering data from VK (even if they say they didn’t enter it), installing applications on a PC, installing all kinds of extensions for downloading music in VK, using VK applications.