Web-based attacks

Web-based attacks have a long history dating back to the early days of the internet, and their prevalence has only increased over time. As the internet became more widely used in the 1990s, web-based attacks became more sophisticated and frequent.

Web-based attacks are malicious actions that take advantage of vulnerabilities in web-based applications, servers, and web browsers to gain unauthorized access or steal sensitive information. These attacks can come in many different forms. In the following sections, we are going to see the most common types of web-based attacks.

Fake logins

In Chapter 4, we discussed the AOL attack which was one of the first major attacks and happened in 1995, when attackers used a fake login page to steal victims’ data. This was only the beginning of this kind of attack and they have evolved over time and become more sophisticated and difficult to detect.

This type of attack is executed in two phases:

• In the first...