Man In The Middle Attack In Cyber Security Training Ppt

Slide 2

This slide talks about man-in-the-middle attacks. In a Man-in-the-Middle attack, the attacker discreetly intercepts and relays messages between two parties, who assume they are speaking directly with each other.

Slide 3

This slide depicts the working of Man-in-the-Middle (MiTM). Cybercriminals place themselves in the middle of data transfers or online conversations during MiTM attacks.

Slide 4

This slide highlights a two-step process of executing a MiTM attack. The steps are data interception and decryption.

Slide 5

This slide discusses the first step, i.e. Interception, for executing MiTM attacks. Data interception involves a threat actor intercepting data transfers between a server and a client. The threat actor misleads the client and the server into believing they are exchanging information with each other.

Slide 6

This slide discusses the second step, i.e. decryption, for executing MITM attacks. In the decryption phase, the intercepted data is unencrypted.

Slide 7

This slide depicts the working of man-in-the-middle attacks. These are: IP Spoofing, HTTP spoofing, DNS spoofing, email spoofing, SSL hijacking, session hijacking, cache poisoning, and WiFi eavesdropping.

Slide 8

This slide talks about IP Spoofing. IP spoofing is similar to identity theft; it occurs when hackers modify the source IP address of a website, email address, or device to disguise it.

Slide 9

This slide discusses HTTP Spoofing. It involves redirecting a browser session to an unsecured or HTTP-based web page without the user's knowledge or consent. This also easy stealing of sensitive information to cybercriminals.

Slide 10

This slide talks about DNS Spoofing. Cybercriminals change domain names in this man-in-the-middle attack to divert traffic to fake websites.

Slide 11

This slide discusses Email Spoofing. This type of MiTM attack allows cybercriminals to take over the email accounts of banks and other financial organizations and track all user transactions.

Slide 12

This slide talks about SSL (Secure Sockets Layer) Hijacking. SSL is a protocol that helps establish an encrypted and secure connection between a browser and the web server.

Slide 13

This slide discusses Session Hijacking. Session hijacking, or stealing browser cookies, is a malicious practice that takes place when hackers steal personal information and passwords stored in the cookies of a user's browsing session.

Slide 14

This slide talks about Cache Poisoning. It enables threat actors on the same subnet as the victims’ to eavesdrop on traffic being routed between them.

Slide 15

This slide discusses WiFi Eavesdropping. During this attack, public Wi-Fi users are tricked into connecting to malicious Wi-Fi networks and hotspots.

Slide 16

This slide depicts an example of a man-in-the-middle attack. One of the biggest credit reporting companies, Equifax, suffered a major data breach in 2017 that revealed the financial data of around 150 million Americans.

Slide 17

This slide gives information about the prevention of man-in-the-attacks. Users should visit secure websites that display “HTTPS” in the URL bar or a padlock symbol before the URL. A VPN should be used while connecting to public WiFi networks and hotspots.