The attacker controlled proxy is the one that logged in, and so captured a valid session for the user account that they can use afaik