Man-in-the-Browser — A man-in-the-browser attack compromises a browser or its environment to observe or alter a user’s interactions. Malicious components can manipulate information before encryption or after it is displayed. This can support credential theft or altered transactions despite an otherwise protected connection.

Added November 6, 2026