Glossary: Application and Credential Attacks, and AI Risks

adversary-in-the-middle phishing

Also written: AitM phishing

A fake sign-in page that passes everything, including the MFA step, through to the real site, then keeps the session cookie that comes back. The attacker gets a signed-in session without beating MFA directly.