Adversary-in-the-middle phishing
Also called: AiTM · Adversary-in-the-middle
A phishing technique where the attacker runs a proxy between the victim and the real sign-in page, relaying traffic so the victim sees a genuine login and completes MFA, while the attacker captures the password and the authenticated session cookie. Because it defeats SMS codes and push approvals, accounts that matter should move to phishing-resistant authentication such as FIDO2 security keys or passkeys.
Further reading: attack.mitre.org
From the Security Academy
Phishing and Business Email Compromise (BEC): Spotting and Stopping It
Common phishing and BEC techniques, from credential theft and AiTM session hijacking to fake vendor bank changes, plus SPF/DKIM/DMARC and payment verification.
8 min read ·
Advisories that mention this term
No advisories mention this term yet.