Timeline for Man-in-the-middle attack detected by antivirus, how is that possible?
Current License: CC BY-SA 4.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 9, 2019 at 20:25 | history | edited | YLearn | CC BY-SA 4.0 |
Insert addition information from comments to the question.
|
| Feb 8, 2019 at 21:29 | history | edited | CrypticX | CC BY-SA 4.0 |
deleted 167 characters in body; edited title
|
| Feb 8, 2019 at 21:21 | vote | accept | CrypticX | ||
| Sep 24, 2017 at 18:37 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Aug 25, 2017 at 18:21 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jul 26, 2017 at 16:57 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jun 26, 2017 at 16:52 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 27, 2017 at 16:36 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Apr 27, 2017 at 15:42 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Mar 28, 2017 at 15:29 | answer | added | Ricardo Reimao | timeline score: 3 | |
| Mar 25, 2017 at 9:05 | vote | accept | CrypticX | ||
| Mar 25, 2017 at 9:05 | |||||
| Mar 25, 2017 at 8:14 | comment | added | Steffen Ullrich | Still not enough information to know what you were doing: Did it complain about the plain text connection (port 80, http) or only about the encrypted connection (port 443, https)? What exactly was the message you got? Did you just redirect the traffic or did you try to actively man in the middle https - this would be easy to detect since the CA signing the certificate is an untrusted one. | |
| Mar 25, 2017 at 0:33 | history | edited | CrypticX | CC BY-SA 3.0 |
added 174 characters in body
|
| Mar 25, 2017 at 0:20 | comment | added | dreamist | You didn't mention through what method, tool, or technique you were using to perform it, or what you were trying to evade detection, but I'd imagine if your attack is known about and has expected behaviors, uses a recognizable piece of software, or has some other kind of marker to be a signal an AV vendor can work to create a defense for it. | |
| Mar 25, 2017 at 0:17 | comment | added | Arminius | What kind of MITM? | |
| Mar 25, 2017 at 0:09 | history | asked | CrypticX | CC BY-SA 3.0 |