Man in the browser attack is all about stealing credentials from sites running in internet-explorer by forcing user to logout and then again logIn.