thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Man-in-the-Browser (MitB)

An attack in which malware inside the browser intercepts and modifies web content and transactions.

Definition

MitB malware hooks browser functions or uses malicious extensions to read and alter pages after TLS decryption, so the user sees legitimate-looking content while transactions are changed. It is commonly used by banking trojans. Out-of-band transaction verification helps defend against it.

Example

A trojan changes the destination account number of a wire transfer while displaying the original to the user.

Exam tip

MitB is a form of on-path attack that encryption alone cannot stop.

Related terms