While browsing his Facebook teed, Matt sees a picture one of his friends posted with the caption. "Learn more about your friends!", as well as a number of personal questions. Matt is suspicious and te

Banks commonly use knowledge-based authentication (KBA) security questions such as 'What is your mother's maiden name?' or 'What was your first pet's name?' as a fallback for account recovery. By answering the Facebook post's personal questions, Matt unknowingly disclosed the exact answers his bank would accept to reset his password. This is a classic social engineering technique designed to harvest security question answers without the victim realizing the true intent.

Brute force attacks systematically try password combinations and do not rely on the victim interacting with a social media post - no post interaction would have been needed for a brute force attack to succeed.

The post asked general personal questions, not for Matt's actual password - there was no mechanism in the described scenario for Matt to have directly entered or transmitted his login credentials.

A keylogger is malware installed on a device that records keystrokes - the scenario describes a social media post interaction with no indication of a malware infection, and the friend confirmed the post was legitimate.