3 ms·
Afaik this isn't a man in the middle attack. This was only possible because the host was infected, allowing capturing of the token before it was sent over a sec
by pieter 17y ago
Afaik this isn't a man in the middle attack. This was only possible because the host was infected, allowing capturing of the token before it was sent over a secure (eg SSL) line.
Capturing the token wouldn't really be necessary. The Attackers could just use the session created by the user to do their stuff (use the infected machine as a proxy). Capturing the token is just simpler, that's all.
- cheald 17y agoIt's clasically MITM. MITM is just a "man in the middle" intercepting data and changing it before it gets reported to either side, then using the original data to their own benefit. There isn't a defined "middle" point, other than "in between the source and the destination"; if the "middle" is on the victim's machine, it's still a valid MITM.