can change the proxy settings in the user's browser to send all sessions through an attacker's machine.

can change the proxy settings in the user's browser to send all sessions through an attacker's machine.

• A. Malicious JavaScript codes
• B. CSRF Attack
• C. Session Hijacking
• D. Trojans

Answer: (D)

Secretly altering a victim’s network configuration to route traffic through an attacker-controlled proxy is a common capability of Trojan malware. A Trojan disguises itself as legitimate software but performs hidden actions, such as changing the browser’s proxy settings so all sessions pass through the attacker’s machine. With this control, the attacker can monitor, modify, or steal data in transit, enabling credential theft and session capture. Malicious JavaScript alone can’t reliably modify system proxy settings due to browser protections; CSRF targets actions within a web application, not changes to network routing; and session hijacking focuses on stealing or replaying tokens to impersonate a user, not redirecting traffic. So Trojan malware is the best fit for this scenario.

Secretly altering a victim’s network configuration to route traffic through an attacker-controlled proxy is a common capability of Trojan malware. A Trojan disguises itself as legitimate software but performs hidden actions, such as changing the browser’s proxy settings so all sessions pass through the attacker’s machine. With this control, the attacker can monitor, modify, or steal data in transit, enabling credential theft and session capture.

Malicious JavaScript alone can’t reliably modify system proxy settings due to browser protections; CSRF targets actions within a web application, not changes to network routing; and session hijacking focuses on stealing or replaying tokens to impersonate a user, not redirecting traffic. So Trojan malware is the best fit for this scenario.