Passback attacks

A class of attack in which a device or application is reconfigured to authenticate against a server the attacker controls, so it transmits the credentials it has stored instead of the attacker having to read them.