While the exact way a MitM attack is conducted may vary from one case to another, the major step of all MitM attacks is to intercept the target's network connection and session with the server and the hacker inserts himself in between both. This can be done several ways, including network connections with poor security, spoofing a wi-fi access port or DNS spoofing. As more workers are transitioning into a work-from-home environment, the reliance on SaaS is becoming more prevalent, thus opening the door to potential MitM attacks.