21 Analytics logo
Request a Demo

Man-in-the-Middle (MiTM)

MiTM stands for Man-in-the-Middle, a type of cyberattack where a third party intercepts and potentially alters the communication between two parties without their knowledge. 

In a Man-in-the-Middle attack, the attacker positions themselves between the communication flow, allowing them to eavesdrop on the data being exchanged.

Man-in-the-Middle attacks can vary, sometimes, the attacker may simply want to monitor the communication to gather sensitive information such as login credentials, financial details, or other confidential data.

In other cases, the attacker might alter the data being exchanged between the two parties. This could involve injecting malicious code or changing the content of the communication to their advantage. 

Or the attacker may attempt to take control of an established session between two parties, gaining unauthorised access to the systems or accounts involved.

In most instances, the user will be unaware of the third person's presence. However, users can protect themselves against these attacks. Some methods include:

  • ensuring web applications and websites use HTTPS (SSL/TLS) to encrypt data in transit.

  • using strong authentication methods, such as multi-factor authentication (MFA), or 

  • using Virtual Private Network (VPN) when accessing sensitive information over untrusted networks. 

Cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.