Hackers Password aur OTP Dono Chura rahe (AiTM Attack )

Aaj ke daur mein hum sab ko sikhaya jata hai ki apne accounts ko safe rakhne ke liye Two-Factor Authentication (2FA) yaani OTP zaroor on rakhein. Lekin kya ho agar main aapse kahoon ki ek aisa attack bhi hai jo aapke password ke sath-sath aapke phone par aaye OTP ko bhi Chura le ja sakta hai?

Ji haan, is khatarnak attack ka naam hai AiTM (Adversary-in-the-Middle) attack.

Aaye din bade-bade cybercriminals corporate companies aur aam logon ko thagne ke liye is technique ka istemal kar rahe hain. Is blog mein hum bilkul aasan shabdon mein samjhenge ki AiTM kya hai, yeh kaise kaam karta hai, aur aap isse kaise bach sakte hain.

AiTM Attack Kya Hai? (What is AiTM?)

AiTM ka full form hota hai Adversary-in-the-Middle. Pehle cyber duniya mein ise Man-in-the-Middle (MITM) attack ke naam se jana jata tha.

Isko aasan bhasha mein samjhein toh—yeh ek aisi hacking technique hai jahan ek hacker aapke aur us website (jaise aapka bank, Instagram, ya Gmail) ke beech mein chupkar baith jata hai jise aap access kar rahe hain.

Aapko lagta hai ki aap asli website se baat kar rahe hain, lekin asal mein aapka poora data pehle hacker ke server se hokar guzarta hai.

Yeh Attack Kab Aur Kaise Shuru Hua?

• Itihas (History): Yeh concept naya nahi hai. Sabse pehli baar 22 November 1976 ko do scientists (Diffie aur Hellman) ne ek research paper mein iski theory di thi.

• Modern AiTM (2017 se ab tak): Pehle is attack se sirf password chori hote the. Lekin 5 July 2017 ko jab security researchers ne Evilginx jise tools ka open-source code release kiya, tab se hackers ne iska roop hi badal diya. Aaj ka Modern AiTM bina kisi dikkat ke aapke multi-factor authentication (MFA/2FA) ko bypass kar deta hai.

AiTM Kaam Kaise Karta Hai? (The Working Mechanism)

Traditional phishing mein agar aap kisi nakli link par password daalte hain, toh hacker ko sirf password milta hai. Agar aapne OTP lagaya hai, toh hacker login nahi kar pata.

Lekin AiTM yahan ek alag hi game khelta hai (Reverse Proxy Method):

1. Nakli Proxy Page: Hacker ek aisa phishing link banata hai jo dikhne mein 100% asli login page jaisa hota hai.

2. Real-Time Data Capture: Jab aap us page par apna username aur password daalte hain, toh hacker ka server use real-time mein asli website par bhej deta hai.

3. Bypassing 2FA/OTP: Asli website jab aapke phone par OTP bhejti hai, toh hacker ka page aapko OTP enter karne ko kehta hai. Jaise hi aap OTP daalte hain, hacker use bhi intercept karke asli website mein submit kar deta hai.

4. Session Hijacking (Sabse Dangerous Part): Login successful hone ke baad, asli website aapke browser ke liye ek Session Cookie generate karti hai (taaki aapko baar-baar login na karna pade). Hacker us session cookie ko hi chura leta hai!

5. Ab hacker ko aapke password ya OTP ki zaroorat nahi hai. Woh us cookie ka use karke aapke account mein direct ghus jata hai.

AiTM Ke Common Types

• Phishing Links (Reverse Proxy): Email ya WhatsApp par farzi links bhejkar login karwana (Tools like Evilginx, Evilproxy).

• Wi-Fi Eavesdropping: Public places (Railway station, Cafe) par free Wi-Fi ke naam par nakli network banana aur aapka traffic track karna.

• DNS Spoofing: Aapke router ya computer ki settings se chhedchhad karke aapko asli site ki jagah galat site par redirect karna.

AiTM Attack Se Kaise Bachein? (Safety Checklist)

Kyuki is attack mein normal OTP bhi fail ho jata hai, isliye aapko thoda zyaada satark (alert) rehna hoga:

• URL ko dhyan se dekhein: Kisi bhi link par click karne ke baad browser ka address bar zaroor check karein. Agar google.com ki jagah go0gle.com ya kuch ajeeb dikhe, toh turant ruk jayein.

• Passkeys aur FIDO2 Security Keys ka use karein: Yeh aaj ke samay ki sabse secure technology hai. Hardware security keys (jaise YubiKey) ya aapke phone ka FaceID/Fingerprint (Passkeys) domain-bound hote hain. Agar website nakli hai, toh yeh kaam hi nahi karenge.

• Public Wi-Fi par VPN lagayein: Agar aap majboori mein bahar ka open Wi-Fi use kar rahe hain, toh hamesha ek accha VPN on rakhein taaki aapka data encrypt rahe.

• Browser Warning ko ignore na karein: Agar browser kabhi kahe ki "Your connection is not private" ya certificate error dikhaye, toh us website par aage na badhein.

Conclusion

AiTM attacks ne yeh sabit kar diya hai ki cyber security mein sirf ek security layer (jaise SMS OTP) par bharosa nahi kiya ja sakta. Hackers har din smart ho rahe hain, isliye humein unse ek kadam aage rehna hoga. Agli baar kisi bhi link par apni details dalne se pehle URL bar zaroor check karein!

Aapko yeh jankari kaisi lagi? Kya aapne kabhi aise kisi cyber fraud ka samna kiya hai? Hamein niche comment karke zaroor batayein aur is blog ko apne dosto ke sath share karna na bhoolein!