Malware Campaign Uses MitM Attack to Distribute Plead Backdoor
Threat actors have launched a new malware campaign that uses an MitM attack to infect unsuspecting users with the Plead backdoor.
Dark Web TLS/SSL Certificates Highlight Need for Shift to Zero Trust Security
Some of the latest website security threats originate from thriving dark web marketplaces for TLS/SSL certificates, which often come packaged with other cybercrime services.
TrickBot Creators Collaborate With BokBot to Conduct Man-in-the-Middle Attacks
Security researchers warn that the cybercriminals behind the TrickBot and BokBot banking Trojans are now collaborating to perform man-in-the-middle (MitM) attacks.
iTranslator Malware Installs Two Drivers to Perform a MitM Attack
Researchers from FortiGuard Labs discovered a malware sample called iTranslator that installs two drivers onto infected machines to perform man-in-the-middle (MitM) attacks.
ISPs May Be Colluding With FinFisher Surveillance, According to Researchers
FinFisher campaigns may be using ISPs to infect users' machines. This is the first time that ISPs have been detected as an infection mechanism.
Forgot Password? Man-in-the-Middle Attack Can Perform a Password Reset, Researchers Warn
Many high-profile online services are vulnerable to a new type of attack that could enable fraudsters to intercept password reset requests.
More Mobile Apps Means More Man-in-the-Middle Attacks
Mobile devices that contain unsanctioned apps are particularly vulnerable to man-in-the-middle attacks, especially when connected to unsecured Wi-Fi.
Wake-Up Call: Millions of Android Users at Risk of MitM Attacks
Security researchers at Zimperium zLabs found a vulnerability in the AirDroid app that could enable a cybercriminals to execute MitM attacks.
New, Live, Interactive Phishing Attacks Emerge in Brazil
The newest threat on Brazil's thriving online fraud scene is interactive phishing, which allows an attacker to steal a victim's personal data in real time.
Proxy Connects Show Evidence of a Software Vulnerability
A security researcher recently discovered a software vulnerability that allows attackers to exploit the way applications respond to HTTP CONNECT requests.