A man-in-the-middle (MitM) attack intercepts communication between two parties, such as a shopper and a store, without either side knowing. Positioned in the middle, the attacker can read, harvest, or alter the data in transit, including login credentials and payment details.
How MitM Attacks Work
Common vectors include rogue or compromised Wi-Fi networks that route a victim’s traffic through the attacker, DNS manipulation that silently redirects a user to a spoofed website, and session hijacking that steals authentication cookies to impersonate a logged-in user. Modern TLS encryption has made classic eavesdropping much harder, so attacks increasingly target the endpoints instead: tricking users onto fake sites or compromising the browser rather than the wire.
Why It Matters for Commerce Brands
Credentials and card data harvested in transit return to stores as account takeover and card not present fraud. Defenses are largely standard security hygiene: enforce HTTPS everywhere with HSTS, use secure session management, offer multi-factor authentication, and follow NIST identity and access management guidance for session and credential handling.
Frequently Asked Questions
Does HTTPS stop man-in-the-middle attacks?
It stops passive eavesdropping on the connection when implemented correctly, which is why attackers now focus on endpoints: fake sites, malicious browser extensions, and stolen session tokens rather than the encrypted channel itself.
What can shoppers do to avoid MitM attacks?
Avoid transacting on untrusted public Wi-Fi, check that the domain is exactly right before logging in, keep browsers updated, and prefer accounts protected with multi-factor authentication.
