Types Of Man-In-The-Middle Attacks :
Today internet is one of the most essential thing in our normal life and it plays a vital role in every industries. Our demand of internet is growing day by day and it is not going to stop until now.
Man in the middle attack is one of the most common cyber-attack. In this attack an attacker act as a medium between the user and the server when a user send a request to a website for a particular data it can be in any form like login credentials, bank details etc. then server send data to user but when a person is interacting between user & server he/she can see all data.
So today i will tell you how an attacker can perform a man in the middle attack ,so just read this blog careful...................
1⃣ IP spoofing:
Every device capable of connecting to the web has an online protocol (IP) address, which is analogous to the road address for your home.
By spoofing an IP address, an attacker can trick you into thinking you’re interacting with an internet site or someone you’re not, perhaps giving the attacker access to information you’d otherwise not share.
2⃣ DNS spoofing:
Domain Name Server, or DNS, spoofing may be a technique that forces a user to a fake website instead of the important one the user intends to go to . If you're a victim of DNS spoofing, you'll think you’re visiting a secure , trusted website when you’re actually interacting with a fraudster. The perpetrator’s goal is to divert traffic from the real site or capture user login credentials.
3⃣ HTTPS spoofing:
When doing business on the internet, seeing “HTTPS” in the URL, rather than “HTTP” is a sign that the website is secure and can be trusted. In fact, the “S” stands for “secure.” An attacker can fool your browser into believing it’s visiting a trusted website when it’s not. By redirecting your browser to an unsecure website, the attacker can monitor your interactions thereupon website and possibly steal personal information you’re sharing.
4⃣ SSL hijacking:
When your device connects to an unsecure server — indicated by “HTTP” — the server can often automatically redirect you to the secure version of the server, indicated by “HTTPS.” A connection to a secure server means standard security protocols are in situ , protecting the info you share thereupon server. SSL stands for Secure Sockets Layer, a protocol that establishes encrypted links between your browser and therefore the web server.
In an SSL hijacking, the attacker uses another computer and secure server and intercepts all the knowledge passing between the server and therefore the user’s computer.
5⃣ Email hijacking:
Cyber criminals sometimes target email accounts of banks and other financial institutions. Once they gain access, they can monitor transactions between the institution and its customers. The attackers can then spoof the bank’s email address and send their own instructions to customers. This convinces the customer to follow the attackers’ instructions instead of the bank’s. As a result, an unwitting customer may find yourself putting money within the attackers’ hands.
6⃣ Wi-Fi eavesdropping:
Cyber criminals can set up Wi-Fi connections with very legitimate sounding names, similar to a nearby business. Once a user connects to the fraudster’s Wi-Fi, the attacker are going to be ready to monitor the user’s online activity and be ready to intercept login credentials, payment card information, and more. This is only one of several risks related to using public Wi-Fi. You can learn more about such risks here.
7⃣ Stealing browser cookies:
To understand the danger of stolen browser cookies, you would like to know what one is. A browser cookie may be a small piece of data an internet site stores on your computer.
For example, an online retailer might store the personal information you enter and shopping cart items you’ve selected on a cookie so you don’t have to re-enter that information when you return.
A cyber criminal can hijack these browser cookies. Since cookies store information from your browsing session, attackers can gain access to your passwords, address, and other sensitive information.
Thanks for reading this blog!!!!!!!!!
Comments
Post a Comment