A man-in-the-middle (MITM) attack involves cyber criminals intercepting and possibly altering communication between two parties without their knowledge. The attacker secretly eavesdrops on conversations and can manipulate the data exchanged, with the intent of stealing sensitive information such as login credentials and financial details. This attack may occur via various communications including Wi-Fi networks, emails, or online transactions.
Types of MITM Attacks
| Wi-Fi Eavesdropping | The attacker sets up a rogue Wi-Fi network or compromises an existing one to intercept communications. |
| Session Hijacking | The attacker steals session cookies to take over a user’s session on a website. |
| IP Spoofing | The attacker pretends to be a legitimate IP address to intercept and manipulate data. |
| DNS Spoofing | The attacker alters DNS responses to redirect users to malicious websites. |
| SSL Stripping | The attacker downgrades a secure HTTPS connection to an unencrypted HTTP connection to intercept data. |
Steps to prevent MITM attacks
- Avoid connecting to public Wi-Fi networks, especially when conducting sensitive transactions. If you must use public Wi-Fi, use a virtual private network (VPN).
- Regularly update your software, browsers, and other applications to patch vulnerabilities.
- Use different strong passwords for each account and enable multi-factor authentication (MFA) wherever possible.
- Stay informed about common phishing techniques and how to recognise them. Educate employees on cyber threats and what actions they should take to avoid being another victim. Simulated attacks on staff can identify and address company security gaps.
- Verify email sender is from a legitimate source by checking the email domain. Hover your mouse over any links to see a preview of the URL to check legitimacy. Do not click on links or download attachments from unknown or suspicious emails.
If you’re uncertain about implementing these preventative measures, don’t hesitate to get in touch with Mitigo for assistance.
