an attack where an attacker secretly intercepts and possibly alters communication between two parties without them knowing

“User logs into app over public WiFi while attacker intercepts data between user and server”