man-in-the-browser
brauseripetis; brauseripete
olemus
(a)brauseripetis: troojan, mis kasutab ära
veebibrauseri nõrkusi ja võib muuta veebilehti,
muuta reaalajas veebitehingute sisu,
lisada tehinguid, koguda tehingu- ja turbeandmeid
ning sooritada muid kahjulikke toiminguid
= a proxy Trojan horse that infects a web browser
(b) brauseripete: rünne sellise troojaniga
= an attack that utilizes a trojan covertly installed on a computer system that modifies the user's web transactions in real time
ülevaateid
https://www.owasp.org/index.php/Man-in-the-browser_attack
https://en.wikipedia.org/wiki/Man-in-the-browser
https://doubleoctopus.com/security-wiki/threats-and-tools/man-in-the-browser-attack/
tõrje
https://betanews.com/2016/12/22/man-in-the-browser-attack-protection/
https://www.virusbulletin.com/virusbulletin/2016/01/paper-protecting-financial-institutions-man-browser-attacks/
https://help.fortinet.com/fweb/610/Content/FortiWeb/fortiweb-admin/Prevent_MiTB_attacks.htm
http://www.mirlabs.net/his19/proceedings/33330054.pdf