A user who suspects their browser cookies have been compromised should immediately change their password on accounts.google.com. This will invalidate all existing cookies, and the user will be asked to login again at the browser.
This action can also be taken by a G Suite Admin on behalf of the user.