Technique
technique:man_in_the_middle_attack
Also: MITM, MITM attack, man-in-the-middle, man-in-the-middle tools
Attack in which an attacker intercepts traffic and redirects or impersonates the intended destination.
Attack in which an attacker intercepts traffic and redirects or impersonates the intended destination.
“There was, in fact, a man-in-the-middle attack against Gmail users”
“This is where a hacker intercepts the traffic that’s supposed to go somewhere else.”
Interception technique used as an analogy for Quantum Insert, involving manipulation of traffic between a user and a legitimate web server.
“This is sort of like a man-in-the-middle attack”
Interception and analysis of network traffic after gaining access to a server inside the lottery network.
“This is the man-in-the-middle attack that he was wanting to do.”
“It’s kind of like a wire tap but for network traffic.”
Network interception technique used to capture credentials and downgrade web logins.
“I start doing man-in-the-middle attacks”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | DigiNotar breach | Explicit | 3 |
| incoming | ASSOCIATED_WITH | Quantum Insert | Explicit | 48 |
| incoming | USES | Os | Explicit | 101 |
| incoming | USES | Greg Linares | Explicit | 160 |
DigiNotar breach INVOLVES man-in-the-middle attack
The rogue certificates were used to conduct a man-in-the-middle attack against Gmail users in Iran.
Explicit Confidence 99% · Jack Rhysider EP 3 Details
“The hacker then took these certificates and proceeded to create a man-in-the-middle attack.”
Quantum Insert ASSOCIATED_WITH man-in-the-middle attack
The episode compares Quantum Insert to a man-in-the-middle attack.
Explicit Confidence 97% · Jack Rhysider EP 48 Details
“This is sort of like a man-in-the-middle attack”
Os USES man-in-the-middle attack
Os routed traffic through a compromised Linux server to capture and analyze traffic inside the lottery network.
Explicit Confidence 99% · Jack Rhysider EP 101 Details
“This is the man-in-the-middle attack that he was wanting to do”
Greg Linares USES man-in-the-middle attack
Greg used man-in-the-middle attacks to steal credentials during a venture-capital-company penetration test.
Explicit Confidence 99% · Greg Linares EP 160 Details
“There, I start doing man-in-the-middle attacks”