Later archive addition

The Password Reset MitM Attack

Nethanel Gelernter, Senia Kalma, Bar Magnezi and Hen Porcilan · IEEE

The Password Reset MitM attack relays a provider's password-reset challenges through an attacker's registration or resource flow, so the victim unknowingly authorizes an account takeover. The paper tests SMS, phone, and security-question variants, evaluates Google and Facebook users, and measures proposed ceremony-level defenses.

Record

Researcher

Nethanel Gelernter, Senia Kalma, Bar Magnezi and Hen Porcilan

Published by

IEEE

Format

Whitepaper

In the archive

• Added to the 2016–17 archive after the original list was published

Tags

• account-takeover
• relay-attack
• identity
• phishing
• owasp-a04-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Nethanel Gelernter, Senia Kalma, Bar Magnezi and Hen Porcilan, first published at the original source. Preserved copies are kept so the citation survives its host.