Man In The Middle Attack Against Bank of America's SiteKey ® Service + Video

Man In The Middle Attack Against Bank of America's SiteKey ® Service + Video
We present this demonstration of a "deceit-augmented man in the middle attack" against the SiteKey ® service used by Bank of America (the underlying technology is also used by other companies). This, or a similar attack, could be used by a phisher to deceive users into entering their login details to a fraudulent website.
Link
http://paranoia.dubfire.net/2007/04/deceit-augmented-man-in-middle-attack.html
Added by
Dancho Danchev
Related links
http://batson.cs.indiana.edu/csoghoia/final-boa-mitm.mov
Homepage
http://paranoia.dubfire.net
13.04.2007