Re: [Full-disclosure] New Paper: MitM Attacks against the chipTAN comfort Online Banking System

[Nick FitzGerald <nick@xxxxxxxxxxxxxxxxxxx>]

Thierry Zoller wrote:

<<snip>>
> For  sake  of  allowing  proper risk  assessment by technically less
> trained persons - one should coin a better term than classical mitm -
> but maybe I am mistaken? what about MITMa (man in the machine)

In my experience, "Man in the Browser" (or MitB) is the phrase that 
this is commonly known as in the anti-malware and phishing communities 
(regardless that some of the components involved are not "in the 
browser", per se, at all).



Regards,

Nick FitzGerald


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/