Skip to content
← Back to glossary

MITB攻撃Man-in-the-Browser (MITB) Attack

Learn in the textbookAttacks on Networks and Communication Paths

DefinitionA man-in-the-browser (MITB) attack (MITB攻撃) is one in which malware (マルウェア, malicious software) that has got into the user's device takes over the browser and rewrites what the screen shows and what gets sent, from inside the browser.

ExplanationThe main target is online banking: the site the user opens is the real one, and the user logs in correctly themselves. The malware may even keep showing the details exactly as the user typed them, so the user is unlikely to notice anything wrong.

AnalogyIt is like a fake clerk standing beside you at the counter who swaps your completed application form for a different one just as it leaves your hand. The counter accepts the form it receives as yours.

Memory hookThe name swaps the "middle" in man-in-the-middle for "browser": the man in the middle has moved into the browser.

Related past-exam questions(1 question)