An employee received an email from a colleague's address asking for the password for the domain controller. The employee noticed a missing letter within the sender's address. What does this incident…

An insider attack involves a current or former employee, contractor, or business partner who has authorized access and misuses it for malicious purposes.

Shoulder surfing is a direct observation technique where an attacker literally looks over a victim's shoulder to obtain sensitive information like PINs or passwords.

Social engineering is a broad category of attacks that rely on human psychological manipulation to trick users into performing actions or divulging confidential information, such as giving up a password. In this scenario, the attacker used a spoofed or similar-looking email address (typosquatting) to impersonate a colleague and solicit sensitive data, which is a classic social engineering tactic.

A brute-force attack involves systematically trying all possible combinations of characters to guess a password or encryption key, rather than tricking a user into providing it.