View source for Man-in-the-browser

{{Short description|Internet browser security threat}}
'''Man-in-the-browser''' ('''MITB''', '''MitB''', '''MIB''', '''MiB'''), a form of Internet [[Threat (computer)|threat]] related to [[man-in-the-middle]] (MITM), is a [[Proxy server|proxy]] [[Trojan horse (computing)|Trojan horse]]<ref name=securityweek>{{cite web|url=http://www.securityweek.com/evolution-proxy-trojans|title=The Evolution of Proxy Trojans|first=Noa|last=Bar-Yosef|date=2010-12-30|access-date=2012-02-03}}</ref> that infects a [[web browser]] by taking advantage of vulnerabilities in [[browser security]] to modify [[web pages]], modify transaction content or insert additional transactions, all in a covert fashion invisible to both the user and host [[web application]]. A MitB [[attack (computing)|attack]] will be successful irrespective of whether security mechanisms such as [[Secure Sockets Layer|SSL]]/[[Public key infrastructure|PKI]] and/or [[Two-factor authentication|two-]] or [[Multi-factor authentication|three-factor authentication]] solutions are in place. A MitB attack may be countered by using [[Out-of-band data|out-of-band]] transaction verification, although [[SMS]] verification can be defeated by '''man-in-the-mobile''' ('''MitMo''') [[mobile virus|malware]] infection on the [[mobile phone]]. Trojans may be detected and removed by antivirus software,<ref name=fsecure>{{cite web|url=http://www.f-secure.com/v-descs/trojan-spy_w32_nuklus_a.shtml|title=Threat Description: Trojan-Spy:W32/Nuklus.A|author=F-Secure|date=2007-02-11|access-date=2012-02-03}}</ref> but a 2011 report concluded that additional measures on top of antivirus software were needed.<ref name=quarri>{{cite web|url=http://www.quarri.com/files/Quarri_PCI_Brief.pdf|title=Web Browsers: Your Weak Link in Achieving PCI Compliance|author=Quarri Technologies, Inc|year=2011|access-date=2012-02-05}}</ref>{{Update inline|date=February 2023}}

A related, simpler attack is the '''boy-in-the-browser''' ('''BitB''', '''BITB''').

The majority of financial service professionals in a 2014 survey considered MitB to be the greatest threat to [[online banking]].<ref>{{Cite journal|last1=Fernandes|first1=Diogo A. B.|last2=Soares|first2=Liliana F. B.|last3=Gomes|first3=João V.|last4=Freire|first4=Mário M.|last5=Inácio|first5=Pedro R. M.|date=2014-04-01|title=Security issues in cloud environments: a survey|url=https://doi.org/10.1007/s10207-013-0208-7|journal=International Journal of Information Security|language=en|volume=13|issue=2|pages=113–170|doi=10.1007/s10207-013-0208-7|s2cid=3330144 |issn=1615-5270|url-access=subscription}}</ref>

==Description==
The MitB threat was demonstrated by Augusto Paes de Barros in his 2005 presentation about backdoor trends "The future of backdoors - worst of all worlds."<ref>{{cite web|url=http://www.paesdebarros.com.br/backdoors.pdf |title=O futuro dos backdoors - o pior dos mundos |publisher=Congresso Nacional de Auditoria de Sistemas, Segurança da Informação e Governança - CNASI |location=Sao Paulo, Brazil |language=pt |last=Paes de Barros |first=Augusto |date=15 September 2005 |access-date=2009-06-12 |url-status=dead |archive-url=https://web.archive.org/web/20110706153819/http://www.paesdebarros.com.br/backdoors.pdf |archive-date=July 6, 2011 }}</ref> The name "man-in-the-browser" was coined by Philipp Gühring on 27 January 2007.<ref name=futureware />

A MitB Trojan works by using common facilities provided to enhance browser capabilities such as [[Browser Helper Object]]s (a feature limited to [[Internet Explorer]]), [[browser extension]]s and [[Augmented browsing|user scripts]] (for example in [[JavaScript]]).<ref name=futureware>{{cite web|url=http://www2.futureware.at/svn/sourcerer/CAcert/SecureClient.pdf|title=Concepts against Man-in-the-Browser Attacks|last=Gühring|first=Philipp|date=27 January 2007|access-date=2008-07-30}}</ref> [[Antivirus software]] can detect some of these methods.<ref name=fsecure />

In a nutshell example exchange between user and host, such as an [[Internet banking]] funds transfer, the customer will always be shown, via confirmation screens, the exact payment information as keyed into the browser. The bank, however, will receive a transaction with materially altered instructions, i.e. a different destination account number and possibly amount. The use of strong authentication tools simply creates an increased level of misplaced confidence on the part of both customer and bank that the transaction is secure. Authentication, by definition, is concerned with the validation of identity credentials. This should not be confused with transaction verification.

==Examples==
Examples of MitB threats on different [[operating system]]s and [[web browser]]s:
{| class="wikitable sortable"
|+ Man-in-the-Browser examples 
! Name !! Details!! [[Operating system]]!! [[Web browser|Browser]]
|- style="background:#e5d1cb;"
| '''Agent.DBJP'''<ref>{{cite web|url=http://www.pcworld.com/article/200448/trojan_writers_target_uk_banks_with_botnets.html|title=Trojan Writers Target UK Banks With Botnets|last=Dunn|first=John E|date=2010-07-03|access-date=2012-02-08}}</ref> ||  || Windows || IE, Firefox
|- style="background:#e5d1cb;"
| '''Bugat'''<ref>{{cite web|url=http://news.techworld.com/security/3243894/zeus-not-the-only-bank-trojan-threat-users-warned/|title=Zeus not the only bank Trojan threat, users warned|last=Dunn|first=John E|date=2010-10-12|access-date=2012-02-03}}</ref> ||  || Windows || IE, Firefox
|- style="background:#e5d1cb;"
| '''Carberp''' || targets [[Facebook]] users redeeming [[e-cash]] vouchers<ref>{{cite web|url=http://news.techworld.com/security/3330728/facebook-users-targeted-in-carberp-man-in-browser-attack/|title=Facebook users targeted in Carberp man-in-the-browser attack|last=Curtis|first=Sophie|date=2012-01-18|access-date=2012-02-03}}</ref> || Windows || IE, Firefox
|- style="background:#e5d1cb;"
| '''ChromeInject'''*<ref name=bitdefender>{{cite web|url=http://www.bitdefender.com/VIRUS-1000451-en--Trojan.PWS.ChromeInject.B.html|title=Trojan.PWS.ChromeInject.B Removal Tool|author=Marusceac Claudiu Florin|date=2008-11-28|access-date=2012-02-05}}</ref>|| [[Greasemonkey]] impersonator<ref name=Utakrit /> || Windows || Firefox
|- style="background:#dfe2e9;"
| [[Clampi]]<ref name=networkworld /> ||  || Windows || IE
|- style="background:#e5d1cb;"
| '''Gozi'''<ref name=securityweek /> ||  || Windows || IE, Firefox
|- style="background:#dfe2e9;"
| '''Nuklus'''<ref name=fsecure /><ref name=Utakrit>{{cite web|url=http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1014&context=ism|title=Review of Browser Extensions, a Man-in-theBrowser Phishing Techniques Targeting Bank Customers|author=Nattakant Utakrit, School of Computer and Security Science, Edith Cowan University|date=2011-02-25|access-date=2012-02-03}}</ref> ||  || Windows || IE
|- style="background:#e5d1cb;"
| '''OddJob'''<ref name=infoworld>{{cite web|url=http://www.infoworld.com/t/cyber-crime/crafty-oddjob-malware-leaves-online-bank-accounts-open-plunder-326|title=Crafty OddJob malware leaves online bank accounts open to plunder|author=Ted Samson|date=2011-02-22|access-date=2012-02-06}}</ref> || keeps bank session open || Windows || IE, Firefox
|- style="background:#e5d1cb;"
| '''Silentbanker'''<ref>{{cite web|url=https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=2563517d-15ee-4fc7-bc3e-5b9b7160f5cd&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments|title=Banking with Confidence|last=Symantec Marc Fossi|date=2008-01-23|access-date=2008-07-30}}</ref> ||  || Windows || IE, Firefox
|- style="background:#dfe2e9;"
| '''Silon'''<ref name=trusteerrapport>{{cite web|url=http://www.trusteer.com/product/trusteer-rapport|title=Trusteer Rapport|last=Trusteer|access-date=2012-02-03}}</ref> ||  || Windows || IE
|- style="background:#e5d1cb;"
| [[SpyEye]]<ref name=networkworld2>{{cite web|url=http://www.networkworld.com/news/tech/2011/033111-mitb-attacks-enterprise.html|title=Man-in-the-Browser attacks target the enterprise|last=CEO of Trusteer Mickey Boodaei|date=2011-03-31|access-date=2012-02-03|archive-url=https://web.archive.org/web/20111208035515/http://www.networkworld.com/news/tech/2011/033111-mitb-attacks-enterprise.html|archive-date=2011-12-08|url-status=dead}}</ref> || successor of Zeus, widespread, low detection || Windows || IE, Firefox
|- style="background:#e5d1cb;"
| '''Sunspot'''<ref name=netsecurity>{{cite web|url=http://www.net-security.org/malware_news.php?id=1719|title=Explosive financial malware targets Windows|author=www.net-security.org|date=2011-05-11|access-date=2012-02-06}}</ref> || widespread, low detection || Windows || IE, Firefox
|- style="background:#fff;"
| [[Tatanga (Trojan horse)|Tatanga]]<ref>{{cite web|url=http://securityblog.s21sec.com/2011/02/tatanga-new-banking-trojan-with-mitb.html
|title=Tatanga: a new banking trojan with MitB functions|author1=Jozsef Gegeny |author2=Jose Miguel Esparza |date=2011-02-25|access-date=2012-02-03}}</ref> || || Windows || IE, Firefox, [[Google Chrome|Chrome]], [[Opera (browser)|Opera]], [[Safari (browser)|Safari]],  [[Maxthon]], [[Netscape Navigator|Netscape]], [[Konqueror]]
|- style="background:#e5d1cb;"
| '''Tiny Banker Trojan'''<ref>{{Cite web
| url = https://www.nbcnews.com/id/wbna47633142
| title = Tiny 'Tinba' Banking Trojan Is Big Trouble
| website = msnbc.com
| date = 31 May 2012
| access-date = 2016-02-28
}}</ref> || Smallest banking Trojan detected in wild at 20KB || Windows || IE, Firefox
|- style="background:#dfe2e9;"
| [[Torpig]]**<ref name=trusteerrapport />||  || Windows || IE, Firefox
|- style="background:#fff;"
| '''URLZone'''****<ref name=securityweek /> ||  || Windows || IE, Firefox, Opera
|- style="background:#ccc;"
| [[Weyland-Yutani BOT]]<ref name=semiaccurate>{{cite web|url=http://semiaccurate.com/2011/05/24/the-mac-os-x-virus-that-wasnt/|title=The Mac OS X Virus That Wasn't|first=Wayne|last=Borean|date=2011-05-24|access-date=2012-02-08}}</ref> ||[[crimeware]] kit similar to Zeus, not widespread<ref name=semiaccurate /><ref name=threatpost>{{cite web|url=http://threatpost.com/en_us/blogs/crimeware-kit-emerges-mac-os-x-050211 |title=Crimeware Kit Emerges for Mac OS X |first=Dennis |last=Fisher |date=2011-05-02 |access-date=2012-02-03 |url-status=dead |archive-url=https://web.archive.org/web/20110905204103/http://threatpost.com/en_us/blogs/crimeware-kit-emerges-mac-os-x-050211 |archive-date=September 5, 2011 }}</ref> || Mac OS X || Firefox
|- style="background:#dfe2e9;"
| '''Yaludle'''<ref name=trusteerrapport /> ||  || Windows || IE
|- style="background:#e5d1cb;"
| [[Zeus (Trojan horse)|Zeus]]***<ref name=networkworld>{{cite web|url=http://www.networkworld.com/news/2010/120810-trojan-bank.html|title=ZeuS-style banking Trojans seen as greatest threat to online banking: Survey|last=Symantec Marc Fossi|date=2010-12-08|access-date=2012-02-03|archive-url=https://web.archive.org/web/20110808104349/http://www.networkworld.com/news/2010/120810-trojan-bank.html|archive-date=2011-08-08|url-status=dead}}</ref>|| widespread, low detection || Windows || IE, Firefox
|}
{| class="wikitable"
|-
| '''Key''' || style="background:#dfe2e9" | [[Microsoft Windows|Windows]]: [[Internet Explorer|IE]] ||style="background:#e5d1cb" | [[Microsoft Windows|Windows]]: [[Internet Explorer|IE]] & [[Firefox]] or [[Firefox]] || style="background:#fff;"| [[Microsoft Windows|Windows]]: other || style="background:#ccc;"| [[Mac OS X]]: any
|-
|colspan="5"|*ChromeInject a.k.a. ChromeInject.A, ChromeInject.B, Banker.IVX, Inject.NBT, Bancos-BEX, Drop.Small.abw<ref name=bitdefender />
|-
|colspan="5"|**Torpig a.k.a. Sinowal, Anserin<ref name=securityweek /> 
|-
|colspan="5"|***Zeus a.k.a. ZeuS, Zbot,<ref>{{cite web|url=http://www.f-secure.com/v-descs/trojan-spy_w32_zbot.shtml|title=Threat DescriptionTrojan-Spy:W32/Zbot|author=F-secure|access-date=2012-02-05}}</ref> Wsnpoem,<ref>{{cite web|url=http://www.symantec.com/security_response/writeup.jsp?docid=2008-072400-0415-99&tabid=2|archive-url=https://web.archive.org/web/20100223094813/http://www.symantec.com/security_response/writeup.jsp?docid=2008-072400-0415-99&tabid=2|url-status=dead|archive-date=February 23, 2010|title=Trojan.Wsnpoem Technical Details|publisher=Symantec|author1=Hyun Choi |author2=Sean Kiernan |date=2008-07-24|access-date=2012-02-05}}</ref><ref>{{cite web|url=https://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2fZbot|title=Encyclopedia entry: Win32/Zbot - Learn more about malware - Microsoft Malware Protection Center|publisher=Symantec|author=Microsoft|date=2010-04-30|access-date=2012-02-05}}</ref> NTOS,<ref name=trusteerzeus>{{cite web|url=http://www.trusteer.com/files/Zeus_and_Antivirus.pdf |title=Measuring the in-the-wild effectiveness of Antivirus against Zeus |author=Trusteer |date=2009-09-14 |access-date=2012-02-05 |url-status=dead |archive-url=https://web.archive.org/web/20111106105546/http://www.trusteer.com/files/Zeus_and_Antivirus.pdf |archive-date=November 6, 2011 }}</ref> PRG,<ref name=trusteerzeus /> Kneber,<ref name=antisource>{{cite web|url=http://www.antisource.com/article.php/zeus-botnet-summary |title=Antisource - ZeuS |author=Richard S. Westmoreland |date=2010-10-20 |access-date=2012-02-05 |url-status=dead |archive-url=https://web.archive.org/web/20120120004836/http://www.antisource.com/article.php/zeus-botnet-summary |archive-date=2012-01-20 }}</ref> Gorhax<ref name=antisource />
|-
|colspan="5"|****URLZone a.k.a. Bebloh!IK, Runner.82176, Monder, ANBR, Sipay.IU, Runner.fq, PWS.y!cy, Zbot.gen20, Runner.J, BredoPk-B, Runner.EQ
|}

==Protection==

===[[Antivirus]]===
Known Trojans may be detected, blocked, and removed by antivirus software.<ref name=fsecure /> In a 2009 study, the effectiveness of antivirus against Zeus was 23%,<ref name=trusteerzeus /> and again low success rates were reported in a separate test in 2011.<ref name=quarri /> The 2011 report concluded that additional measures on top of antivirus were needed.<ref name=quarri />

===Hardened software===
* Browser security software: MitB attacks may be blocked by in-browser security software such as Cymatic.io, [[Trusteer]] Rapport for [[Microsoft Windows]] and [[Mac OS X]], which blocks the APIs from browser extensions and controls communication.<ref name=Utakrit /><ref name=networkworld /><ref name=trusteerrapport />
* Alternative software: Reducing or eliminating the risk of malware infection by using [[portable application]]s or using alternatives to [[Microsoft Windows]] like [[Mac OS X]], [[Linux]], or mobile OSes Android, [[iOS]], [[ChromeOS]], [[Windows Mobile]], [[Symbian]], etc., and/or browsers [[Google Chrome|Chrome]] or [[Opera (browser)|Opera]].<ref name=computerworld>{{cite web|url=http://blogs.computerworld.com/19692/online_banking_what_the_bbc_missed_and_a_safety_suggestion|title=Online banking: what the BBC missed and a safety suggestion|first=Michael|last=Horowitz|date=2012-02-06|access-date=2012-02-08}}</ref> Further protection can be achieved by running this alternative OS, like Linux, from a non-installed [[live CD]], or [[Live USB]].<ref name=lifehacker>{{cite web|url=http://lifehacker.com/5381466/use-a-linux-live-cdusb-for-online-banking|title=Use a Linux Live CD/USB for Online Banking|first=Kevin|last=Purdy|date=2009-10-14|access-date=2012-02-04}}</ref>
* Secure Web Browser: Several vendors can now provide a two-factor security solution where a Secure Web Browser is part of the solution.<ref>{{Cite book|last1=Konoth|first1=Radhesh Krishnan|last2=van der Veen|first2=Victor|last3=Bos|first3=Herbert|title=Financial Cryptography and Data Security |chapter=How Anywhere Computing Just Killed Your Phone-Based Two-Factor Authentication |date=2017|editor-last=Grossklags|editor-first=Jens|editor2-last=Preneel|editor2-first=Bart|chapter-url=https://link.springer.com/chapter/10.1007/978-3-662-54970-4_24|series=Lecture Notes in Computer Science|volume=9603 |language=en|location=Berlin, Heidelberg|publisher=Springer|pages=405–421|doi=10.1007/978-3-662-54970-4_24|isbn=978-3-662-54970-4}}</ref> In this case, MitB attacks are avoided, as the user executes a hardened browser from their two-factor security device rather than executing the "infected" browser from their own machine.

===Out-of-band transaction verification===
A theoretically effective method of combating any MitB attack is through an [[Out-of-band data|out-of-band]] (OOB) transaction verification process. This overcomes the MitB trojan by verifying the transaction details, as received by the host (bank), to the user (customer) over a channel other than the browser; for example, an automated telephone call, [[SMS]], or a dedicated [[mobile app]] with graphical cryptogram.<ref name=Finextra>{{cite web|url=http://www.finextra.com/news/fullstory.aspx?newsitemid=19280|title=Commerzbank to deploy Cronto mobile phone-based authentication technology|author=Finextra Research|date=2008-11-13|access-date=2012-02-08}}</ref> OOB transaction verification is ideal for mass market use since it leverages devices already in the public domain (e.g. [[landline]], [[mobile phone]], etc.) and requires no additional hardware devices, yet enables three-factor authentication (using voice [[biometrics]]), transaction signing (to non-repudiation level), and transaction verification. The downside is that the OOB transaction verification adds to the level of the end-user's frustration with more and slower steps.

====Man-in-the-Mobile====
[[Mobile phone]] [[Mobile virus|mobile Trojan]] spyware '''man-in-the-mobile''' ('''MitMo''')<ref name=Chickowski>{{cite web|url=http://www.darkreading.com/authentication/167901072/security/application-security/227700141/man-in-the-mobile-attacks-highlight-weaknesses-in-out-of-band-authentication.html|title='Man In The Mobile' Attacks Highlight Weaknesses In Out-Of-Band Authentication|first=Ericka|last=Chickowski|date=2010-10-05|access-date=2012-02-09|archive-date=2012-03-01|archive-url=https://web.archive.org/web/20120301203206/http://www.darkreading.com/authentication/167901072/security/application-security/227700141/man-in-the-mobile-attacks-highlight-weaknesses-in-out-of-band-authentication.html|url-status=dead}}</ref> can defeat OOB SMS transaction verification.<ref name=Schwartz />
* ZitMo (Zeus-In-The-Mobile) is not a MitB Trojan itself (although it performs a similar proxy function on the incoming SMSes), but is mobile [[malware]] suggested for installation on a mobile phone by a Zeus-infected computer. By intercepting all incoming SMSes, it defeats SMS-based banking OOB two-factor authentication on [[Windows Mobile]], [[Android (operating system)|Android]], [[Symbian]], and [[BlackBerry]].<ref name=Schwartz>{{cite web|url=http://www.informationweek.com/news/security/mobile/231001685|title=Zeus Banking Trojan Hits Android Phones|first=Mathew J.|last=Schwartz|date=2011-07-13|access-date=2012-02-04|archive-date=2012-07-06|archive-url=https://web.archive.org/web/20120706044256/http://www.informationweek.com/news/security/mobile/231001685|url-status=dead}}</ref> ZitMo may be detected by Antivirus running on the mobile device.
* SpitMo (SpyEye-In-The-Mobile, SPITMO) is similar to ZitMo.<ref>{{cite web|url=http://www.qadit.com/blog/?p=2130|title=Internet Banking & Mobile Banking users beware – ZITMO & SPITMO is here !!|first=Mahesh|last=Balan|date=2009-10-14|access-date=2012-02-05}}</ref>

===Web fraud detection===
Web fraud detection can be implemented at the bank to automatically check for anomalous behaviour patterns in transactions.<ref>{{cite web|url=http://howto.techworld.com/security/3335614/how-protect-online-transactions-with-multi-factor-authentication/|title=How to protect online transactions with multi-factor authentication|first=Julie|last=Sartain|date=2012-02-07|access-date=2012-02-08}}</ref>
TLS Negotiation failed: FAILED_PRECONDITION: starttls error (71): 126011017202752:error:1000012e:SSL routines:OPENSSL_internal:KEY_USAGE_BIT_INCORRECT:third_party/openssl/boringssl/src/ssl/ssl_cert.cc:431:

==Related attacks==

===Proxy trojans===
[[Keyloggers]] are the most primitive form of '''proxy trojans''', followed by browser-session recorders that capture more data, and lastly MitBs are the most sophisticated type.<ref name=securityweek />

===Man-in-the-middle===
{{main|Man-in-the-middle}}
SSL/PKI etc. may offer protection in a [[man-in-the-middle]] attack, but offers no protection in a man-in-the-browser attack.

===Boy-in-the-browser===
A related attack that is simpler and quicker for malware authors to set up is termed '''boy-in-the-browser''' ('''BitB''' or '''BITB'''). Malware is used to change the client's computer network routing to perform a classic man-in-the-middle attack. Once the routing has been changed, the malware may completely remove itself, making detection more difficult.<ref>{{cite web|url=http://www.imperva.com/DefenseCenter/ThreatAdvisories/Boy_in_the_Browser|title=Threat Advisory Boy in the Browser|last=Imperva|date=2010-02-14|access-date=2015-03-12}}</ref>

===Clickjacking===
{{main|Clickjacking}}
Clickjacking tricks a web browser user into clicking on something different from what the user perceives, by means of malicious code in the webpage.

==See also==

* [[Form grabbing]]
* [[IT risk]]
* [[Threat (computer)]]
* [[Timeline of computer viruses and worms]]
* [[Security token]]
* [[Transaction authentication number]]
* [[DNS hijacking]]

==References==
{{Reflist|30em}}

==External links==
* [http://www.ksyash.com/2012/01/virus-attack-on-hsbc-transactions-with-otp-device/ Virus attack on HSBC Transactions with OTP Device]
* [http://www.ksyash.com/2011/12/virus-attack-on-icici-bank-transactions/ Virus attack on ICICI Bank Transactions]
* [http://www.ksyash.com/2011/12/virus-attack-on-citibank-transactions/ Virus attack on Citibank Transactions]
* [https://www.bbc.co.uk/news/technology-16812064 Hackers outwit online banking identity security systems] BBC Click
* [https://web.archive.org/web/20120120004836/http://www.antisource.com/article.php/zeus-botnet-summary Antisource - ZeuS] A summary of ZeuS as a Trojan and Botnet, plus vector of attacks
* {{YouTube|8QYsO1kgse4|Man-In-The-Browser Video}} Entrust President and CEO Bill Conner
* {{YouTube|CzdBCDPETxk|Zeus: King of crimeware toolkits Video}} The Zeus toolkit, Symantec Security Response
* [http://news.bbc.co.uk/1/hi/programmes/click_online/9692312.stm How safe is online banking? Audio] BBC Click
* {{YouTube|CzdBCDPETxk|Boy-in-the-Browser Cyber Attack Video}}  Imperva

{{Malware}}
{{Botnets}}
{{Web browsers}}

[[Category:Computing culture]]
[[Category:Computing terminology]]
[[Category:Hacking (computer security)]]
[[Category:Social engineering (security)]]
[[Category:Trojan horses]]
[[Category:Web security exploits]]