Glossary: Threat Vectors: Files, Networks and Endpoints

Adversary-in-the-middle (AiTM) phishing

Also written: AiTM, AiTM phishing

A fake sign-in page sits between the person and the real site and passes everything through, so the person completes real MFA and the attacker keeps the session cookie that comes back. MFA is not broken; the attacker simply takes the result of a finished sign-in.