For research purposes.
I'm wondering, in a high level way, how MITM attacks are actually done in the real world.
So over the internet the client talks to the server, or one person emails the other, and basically all that is happening is that packets of information are being send from A to B, right? My question is, what are the methods for an attacker to get hold of the communications mid transit, over the internet, and attack as a MITM?
The adversary can be NSA or a local enthusiast in a coffee shop. I just want to know a list of the different methods a MITM attacker can actually intercept communications and act as a MITM. Maybe listing some software as well, eg., explaining how something like Wireshark actually works.
Many thanks for the help.
edit: I don't think my question needs is so broad you have to close it. i just want to know the different techniques for being a man-in-the-middle. Literally, if Alice sends emails to Bob, how does Eve spy on this connection?