On-path Browser Attack
- •
def
- •
an on-path attack where the "middleman" runs directly on the victim's own computer (via malware/a trojan doing the proxy work), rather than somewhere on the network — formerly known as a man-in-the-browser attack
- •
- •
why it's effective
- •
relatively easy to proxy even encrypted traffic this way, since everything looks normal to the victim; commonly waits for the victim to log into their bank, then drains the account
- •
- •
related