Pedro Fortuna - Protecting Crypto Exchanges From MIB Attacks

### The Rise of Man-in-the-Browser Attacks on Crypto At 00:00, Pedro Fortuna, CTO and co-founder of Jscrambler, presents on protecting cryptocurrency exchanges and users from Man-in-the-Browser (MitB) attacks at the Packet Hacking Village. Fortuna discusses how high-value web applications are targeted by client-side browser attacks.

### Threat Vectors: Extensions, Injections, and DOM Tampering At 11:43, Fortuna details client-side attack vectors. Malicious browser extensions, compromised third-party scripts, and cross-site scripting (XSS) allow attackers to tamper with the web application DOM in real-time, bypassing server-side security controls and multi-factor authentication.

### Anatomy of Address Substitution Attacks At 23:30, the presentation examines how clipboard hijacking and DOM manipulation attacks function during financial transactions. When a user copies and pastes a cryptocurrency wallet address to initiate a withdrawal, injected client scripts dynamically replace the destination address with an attacker-controlled address right before the transaction is signed.

### Real-Time Client-Side Application Monitoring At 37:34, Fortuna introduces runtime application self-protection (RASP) and client-side integrity monitoring. He details how monitoring script execution within the browser allows exchanges to detect unauthorized DOM mutations, identify malicious prototype pollution, and neutralize credential harvesting in real time.

### Defense-in-Depth for Financial Web Applications Concluding between 45:00 and 51:12, Fortuna reviews web security best practices. He stresses the implementation of strict Content Security Policy (CSP) directives, Subresource Integrity (SRI), and multi-channel out-of-band transaction verification to safeguard user funds against client-side exploitation.

(AI summary — Gemini Flash)