Back

Definition
A man in the middle attack, or MITM, happens when an attacker positions themselves between a user and a website, app, or service. The attacker may intercept, read, alter, or redirect data without the user or system realizing the connection has been compromised.

Why it matters
Man in the middle attacks matter because they can expose sensitive information such as passwords, payment details, session tokens, or personal data. They can also allow attackers to impersonate trusted services, modify transactions, or gain unauthorized access to accounts.

Example use case
A user connects to a public Wi-Fi network and signs in to an account. An attacker on the same network intercepts the connection and captures login data or session information, allowing them to attempt unauthorized access.