Man in the Browser attacks

International Journal of Ambient Computing and Intelligence

Volumn 4, Issue 1, 2012, Pages 29-39

  Dougan, Timothy ^a   Curran, Kevin ^a  

^a UNIVERSITY OF ULSTER   (United Kingdom)

Author keywords

Hacking; Internet banking; Man in the browser; Man in the middle; Security

Indexed keywords

AUTHENTICATION DATA; CONTROL STRUCTURE; DATA INTERACTIONS; INTERNET BANKING; INTERNET ENVIRONMENT; LEGITIMATE USERS; MAN IN THE MIDDLE ATTACKS; MAN IN THE MIDDLES (MITM); MAN-IN-THE-BROWSER; SECURITY; SECURITY COMMUNITY;

ELECTRONIC COMMERCE; PERSONAL COMPUTING; WORLD WIDE WEB;

COMPUTER CRIME;

EID: 84869023231     PISSN: 19416237     EISSN: 19416245     Source Type: Journal    
DOI: 10.4018/jaci.2012010103     Document Type: Article

References (16)

1. Arcot. (2010). Protecting Online Customers from Man-in-the-Browser and Man-in-the-Middle Attacks. Retrieved from Arcot Resources - Briefs and White Papers for Online Identity Fraud Protection website: http://www.arcot.com/ resources/docs/Protection-from-MITM-&-MITB-Attacks-White-Paper.pdf
2. Chechik, D. (2009, September 30). Malware Analysis - Trojan Banker URLZone/Bebloh. Retrieved April 5, 2011, from M86 Security Labs website: http://labs.m86security.com/2009/09/malware-analysistrojan-banker-urlzonebebloh/
3. Entrust. (2010). Defeating Man-in-the-Browser. Retrieved April 3, 2011, from Internet Security and Encryption White Papers website: http://www.entrust. com/resources/download.cfm/24002/
4. Falliere, N., & Chien, E. (2009). Zeus: King of the Bots. Retrieved from Security Response Whitepapers Symantec Corp. website: http://www.symantec. com/content/en/us/enterprise/media/security-response/whitepapers/ zeus-king-of-bots.pdf
5. Finjan. (2009, July). Cybercrime Intelligence Report, Issue no. 3. Retrieved March 20, 2011, from M86 Security website: http://www.finjan.com/ GetObject.aspx?ObjId=679
6. Gühring, P. (2006, September 12). Concepts against Man-in-the-Browser Attacks. Retrieved March 3, 2011, from CAcert.org website: http://www2.futureware.at/svn/sourcerer/CAcert/SecureClient.pdf
7. Hallam-Baker, P. (2011, March 23). The Recent RA Compromise. Retrieved March 25, 2011, from Comodo Blogs website: http://blogs.comodo.com/it-security/ data-security/the-recent-ra-compromise/
8. Imperva. (2010, November 16). Top ten security trends for2011. Retrieved from Continuity Central website: http://www.continuitycentral.com/feature0830. html
9. Litan, A., & Allan, A. (2006, September 12). Threats: Man in the Browser. Retrieved April 10, 2011, from Tricipher website: http://www.tricipher. com/threats/man-in-the-browser.html
10. MCRC. (2009, July 22). How a cybergang operates a network of 1.9 million infected computers. Retrieved April 2011, from SecureTweets Blog website: http://www.finjan.com/SecureTweets/Blog/post/How-a-cybergang-operates-a-network- of-19-million-infected-computers.aspx
11. Murchu, L. O. (2008, January 8). Trojan. Silentbanker Technical Details. Retrieved April 3, 2011, from Symantec Security Response website: http://www.symantec.com/security-response/writeup.jsp?docid=2007-121718-1009- 99&tabid=2
12. Mushaq, A. (2010, February 19). Man in the Browser: Inside the Zeus Trojan. Retrieved April 9, 2011, from threatpost: Kaspersky Lab Security News Service website: http://threatpost.com/en-us/blogs/manbrowser-inside-zeus- trojan-021910
13. RSA Fraud Action Research Labs. (2008, October 31). One Sinowal Trojan + One Gang = Hundreds of Thousands of Compromised Accounts. Retrieved March 15, 2011, from Speaking of Security - The RSA Blog and Podcast website: http://blogs.rsa.com/rsafarl/one-sinowal-trojan-one-gang-hundreds-of-thousands- of-compromised-accounts/
14. Stone-Gross, B., Cova, M., Cavallaro, L., Gilbert, B., Szydlowski, M., Kemmerer, R., et al. (2009). Your Botnet is My Botnet: Analysis of a Botnet Takeover. Retrieved April 2, 2011, from Taking over the Torpig botnet website: http://www.cs.ucsb.edu/~seclab/projects/torpig/torpig.pdf
15. Symantec. (2009). Zeus: King of the Bots. Retrieved April 5, 2011, from Security Response Whitepapers Symantec Corp. website: http://www.symantec.com/ content/en/us/enterprise/media/security-response/whitepapers/zeus-king-of-bots. pdf
16. Tanenbaum, A. S., & Wetherall, D. J. (2011). Computer Networks (5th ed.). Boston, MA: Pearson.