An attack technique that hijacks a browser using malware to insert malicious operations between the user and a legitimate website, abbreviated as MITB (Man In The Browser). In online banking scenarios, attackers overlay fraudulent screens on legitimate transaction pages to silently alter transfer destination account numbers or steal information. A key characteristic is that it cannot be prevented by SSL/TLS encryption alone.

Past questions testing this term · 1 questions

• 2018h30a #60オンラインバンキングにおいて，マルウェアなどでブラウザを乗っ取り，正式な取引画面の間に不正な画面を介在させ，振込先の情報を不正に書き換えて，攻撃者の指定した口座…