Back to Glossary
Attack Types

MITM (Man-in-the-Middle)

Attack intercepting and modifying traffic between two parties

MITM (Man-in-the-Middle) is an attack where an attacker secretly intercepts and potentially modifies communication between two parties who believe they are communicating directly.

Types of MITM Attacks

  • ARP Spoofing — ARP table poisoning
  • DNS Spoofing — DNS response poisoning
  • SSL Stripping — downgrading HTTPS to HTTP
  • WiFi Eavesdropping — WiFi listening
  • Session Hijacking — session interception

Attack Scenarios

  1. Public WiFi networks
  2. Compromised routers
  3. Malware on device
  4. ARP attacks on local network

Protection

  • Use HTTPS everywhere
  • VPN on public networks
  • Certificate Pinning
  • HSTS (HTTP Strict Transport Security)
  • Certificate verification

Category

DDoS, phishing, malware, social engineering