> often only things that lets someone know they are being MitM attacked or phished is when the corporate branding feels "off" Why? Man in the middle can just s

> often only things that lets someone know they are being MitM attacked or phished is when the corporate branding feels "off" Why? Man in the middle can just snatch off the credentials on the way back to the backend, they don't need to change anything.