Which method can change browser proxy settings to route traffic through an attacker?

Which method can change browser proxy settings to route traffic through an attacker?

• A. Malicious JavaScript codes
• B. Man-in-the-Browser Attack
• C. CSRF Attack
• D. Trojans

Answer: (D)

To redirect a user’s traffic through an attacker, the attacker needs stealthy control over the target system to alter how the browser connects to the network. A Trojan horse malware fits this, because it silently installs and can modify settings that govern how traffic is routed—such as the proxy configuration in the operating system or in the browser—so all browser requests are sent to a proxy controlled by the attacker. This gives the attacker a chance to intercept, view, or modify traffic. Malicious JavaScript can’t reliably change system or browser proxy settings due to security boundaries and sandboxing, so it isn’t the typical method for altering where traffic goes. CSRF attacks manipulate actions on a web app from an authenticated user but don’t alter local proxy configurations. A Man-in-the-Browser attack is a specific browser-embedded technique for intercepting or changing traffic, often delivered by malware; Trojan is the broader category that encompasses such capabilities, including installing components that adjust proxy settings to route traffic through the attacker.

To redirect a user’s traffic through an attacker, the attacker needs stealthy control over the target system to alter how the browser connects to the network. A Trojan horse malware fits this, because it silently installs and can modify settings that govern how traffic is routed—such as the proxy configuration in the operating system or in the browser—so all browser requests are sent to a proxy controlled by the attacker. This gives the attacker a chance to intercept, view, or modify traffic.

Malicious JavaScript can’t reliably change system or browser proxy settings due to security boundaries and sandboxing, so it isn’t the typical method for altering where traffic goes. CSRF attacks manipulate actions on a web app from an authenticated user but don’t alter local proxy configurations. A Man-in-the-Browser attack is a specific browser-embedded technique for intercepting or changing traffic, often delivered by malware; Trojan is the broader category that encompasses such capabilities, including installing components that adjust proxy settings to route traffic through the attacker.