a malicious person positions themself between two communicating devices or systems. Allows the attacker to intercept all data being exchanged in real time without either party realizing it.