D2 · Threats

What is a Man-in-the-Browser (MitB) attack?

A MitB attack uses a browser trojan to intercept and modify web transactions in real-time — capturing banking credentials, modifying transfer amounts after authentication.
MitB defeats standard MFA — authentication succeeds, then the trojan modifies the transaction. Out-of-band transaction verification (SMS confirmation of exact transfer details) is an effective defense.
← Back to Glossary Practice Questions →