One Size Fits All - Universal Man in the Browser Attack Targets All Websites

We have discovered a new Man in the Browser (MitB) scam that does not target specific websites, but instead collects data submitted to all websites without the need for post-processing. This development, which we are calling Universal Man-in-the-Browser (uMitB), is significant. http://www.trusteer.com/blog/one-size...

• Category

  Science & Technology

[Ryan Steier]

Well there is your problem...you're using IE.

[Michael Frost]

I've got no problem with uMitB on my FreeBSD machine,

[GonzaloVC007]

It's an addon running inside IE?

[Jared H]

Showing data retrieval on the local machine is NOT particularly impressive by any measure. This video fails so many technical elements that it cannot be taken seriously.

[Lembaspl7777]

Seems like a regular phishing or like a regular stealer, nothing new. The only difference it has is that it copies all stuff from credit card forms, instead of specified sites. Also you show a tutorial about security using Internet Explorer - worst Internet browser with loads of security hoeles.

[wgmann0303]

I find it interesting that you can't see the actual website address. You can't verify that this site is the actual website or one the replicated to a local server. You can replicate the site, load up a MySQL server, capture the data on export to clear txt file.

[Ashutosh Jain]

Can you please explain a bit more about it? By just watching video one can not get the idea what is happening here..

[zombiebatch]

Could use elaboration on what is happening here.