An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user…

The correct answer is A. Shoulder surfing. Shoulder surfing is the practice of covertly observing someone to steal sensitive information such as PINs, passwords, or credentials. Traditionally done by looking over someone's shoulder, it can also be carried out using cameras or recording devices. Placing a CCTV camera to…

Threats, vulnerabilities, and mitigations

Question

An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user accounts belonging to ATM operators may have been compromised. Which of the following attacks has MOST likely taken place?

Options

AShoulder surfing
BDumpster diving
CWhaling attack
DVishing attack

How the community answered

(46 responses)

A
85% (39)
B
9% (4)
C
2% (1)
D
4% (2)

Explanation

Shoulder surfing is the practice of covertly observing someone to steal sensitive information such as PINs, passwords, or credentials. Traditionally done by looking over someone's shoulder, it can also be carried out using cameras or recording devices. Placing a CCTV camera to remotely observe ATM keypads or operator screens to capture login credentials is a technologically enhanced form of shoulder surfing. Dumpster diving involves searching discarded physical materials for sensitive data. Whaling is a spear-phishing attack targeting high-level executives. Vishing is social engineering conducted over telephone calls.

Topics

#shoulder surfing#physical security#ATM attacks#credential theft

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice