Which type of attack focuses on gaining unauthorized access to confidential information?

The focus of the question is on gaining unauthorized access to confidential information. A Man-in-the-Middle Attack is characterized by an attacker positioning themselves between two parties in a communication channel, allowing them to intercept, modify, or relay messages. This type of attack is particularly effective for stealing sensitive data, such as login credentials or personal information, as it can occur without either party being aware of the interception.

In contrast, while other types of attacks listed can also compromise data, they do not specifically exemplify the deliberate interception of communication to access confidential information in the same direct manner as a Man-in-the-Middle Attack. A Denial-of-Service Attack primarily aims to disrupt services rather than steal information, while a Phishing Attack typically involves tricking individuals into revealing sensitive information through deceptive communications. An SQL Injection Attack focuses on exploiting vulnerabilities in databases to manipulate or control the database rather than directly intercepting communications.