Advanced Phishing Techniques: Analyzing Adversary-in-the-Middle and Browser-in-the-Browser Attacks in Modern Cybersecurity

Abstract Phishing attacks remain among the most common techniques malicious actors use to steal sensitive information. This paper examines two emerging phishing techniques: Adversary-in-The-Middle (AiTM) and Browser-in-the-Browser (BitB) attacks. AiTM attacks intercept communicating devices, allowing attackers to hijack accounts and access sensitive data. BitB attacks use a deceptive pop-up login window that mimics a legitimate authentication portal, forcing users to input private credentials. These methods have been developed to bypass traditional security measures, especially Multi-Factor Authentication (MFA), posing an ever-growing threat to real-life sectors such as finance, healthcare, and public services. These attacks are becoming more prevalent across various sectors, calling for businesses to implement stronger security measures. Effective countermeasures include detection and prevention, mitigation to limit attack impact, and AI-based attack identification and termination tools. Organizations can reduce the risk of these sophisticated cyber threats through a combination of prevention, mitigation, and AI-based tools.