Using technical means to redirect users into accessing a fake Web site masquerading as a legitimate one and divulging personal information.
Source(s):
NIST SP 800-44 Version 2
An attack in which an attacker corrupts an infrastructure service such as DNS (Domain Name System) causing the subscriber to be misdirected to a forged verifier/RP, which could cause the subscriber to reveal sensitive information, download harmful software, or contribute to a fraudulent act.
Source(s):
NIST SP 800-63-3
An attack in which an Attacker corrupts an infrastructure service such as DNS (Domain Name Service) causing the Subscriber to be misdirected to a forged Verifier/RP, which could cause the Subscriber to reveal sensitive information, download harmful software or contribute to a fraudulent act.
Source(s):
NIST SP 800-63-2
[Superseded]