An attack whereby an active, established, session is intercepted and co-opted by the attacker.