As the chief security officer at SecureMobile, you are overseeing the development of a mobile banking application. You are aware of the potential risks of man-in-the-middle (MitM) attacks where an att

Two-factor authentication enhances login security by requiring an additional verification factor, but it does not prevent a Man-in-the-Middle attacker from intercepting data communication once a session is established over a rogue Wi-Fi network.

This feature directly addresses the specific threat of Man-in-the-Middle (MitM) attacks conducted via rogue Wi-Fi hotspots by ensuring the mobile application ceases communication when an untrusted access point is detected. By preventing data transmission over a potentially compromised network, the app protects sensitive user information from interception and misuse.

While connecting to unencrypted Wi-Fi networks is a security risk, a rogue hotspot can still be configured with encryption (e.g., WPA2) to appear legitimate while still being controlled by an attacker for a MitM attack, making this an insufficient countermeasure.

Requiring periodic password changes is a general security hygiene practice aimed at limiting the lifespan of compromised credentials, but it does not directly prevent Man-in-the-Middle attacks where communication is intercepted in real-time over a rogue Wi-Fi network.