How does the Managed Browser Service protect against man-in-the-browser attacks?
This is one of the most insidious attack types currently known. In its worst variety the malware simply sits quietly until the user has logged into a service and then the malware hijacks the logged in session to carry out whatever tasks it has been set up to execute. For example, a man-in-the-browser (MITB) variety may wait for a user to login to an online bank and then it will setup a new payment recipient (the bad guys) and transfer whatever sum it wishes into the bad guysʼ account. It is possible to do this discretely in the background, so this account could be farmed over a long period of time, with a small sum being transferred each time the user logs in. Alternatively the bad guys could go for a single hit to empty the account in one go, knowing that this will probably be spotted immediately. The Managed Browser Service protects against background malware activities with its malware quarantine feature. This limits the actions that can take place in any webpage to those authorized
