LAN MAC Address Spoofing Attacks

• MAC address spoofing attacks occur when the threat actors alter their MAC address to match a known MAC address on the LAN
• The switch overwrites the current MAC table entry and assigns the MAC address to the new port
• The Switch then inadvertently forwards frames destined for the target host to the attacking host
• There is no security mechanism at Layer 2 that allows a switch to verify the source of MAC addresses, which is what makes it so vulnerable to spoofing