Man in the Browser Attacks

摘要: Man-in-the-Browser attacks are a sophisticated new hacking technique associated with Internet crime, especially that which targets customers of banking. The security community has been aware them as such for time but they have grown in ability and success during time. These specialised version Man-in-the-Middle attack, operate by stealing authentication data altering legitimate user transactions to benefit the attackers. This paper examines what capable how specific versions attack executed, reference their control structure, interaction techniques, methods circumventing security. Finally authors discuss effectiveness counter-Man-in-the-Middle strategies, speculate upon these tell us about environment.