Zuk Avraham, CEO of Zimperium mobile security startup, presented a method that would allow a cybercriminal to gain full control of a LinkedIn users account by using a man-in-the-middle attack that takes advantage of an SSL stripping technique.SSL stripping consists in the attacker interposing between the user and the service they try to access and to replace HTTPS (HTTP Secure) requests with insecure HTTP ones, allowing reading of the intercepted information in plain text.The demonstra…
Comments are closed.
