The $4.2 Million MITM Attack Nobody Saw Coming


It was a regular Tuesday morning when the CFO of a mid-sized financial services firm clicked "Wire Transfer: $4,200,000" from what appeared to be their bank's legitimate portal. The SSL padlock icon was there. The domain looked right. Everything seemed normal.

Except it wasn't their bank.

An...