A security attack in which an attacker intercepts and possibly modifies data that is transmitted between two users. The attacker pretends to be the other person to each user. In a successful man-in-the-middle attack the users are unaware that there is an attacker between them intercepting and modifying their data.