COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-508

Shoulder Surfing

In a shoulder surfing attack, an adversary observes an unaware individual's keystrokes, screen content, or conversations with the goal of obtaining sensitive information. One motive for this attack is to obtain sensitive information about the target for financial, personal, political, or other gains. From an insider threat perspective, an additional motive could be to obtain system/application credentials or cryptographic keys. Shoulder surfing attacks are accomplished by observing the content "over the victim's shoulder", as implied by the name of this attack.

Soyutlama

Detailed

Tipik ciddiyet

High

Saldırı ihtimali

High

Saldırıyı anla

Bu saldırı kalıbı nedir?

In a shoulder surfing attack, an adversary observes an unaware individual's keystrokes, screen content, or conversations with the goal of obtaining sensitive information. One motive for this attack is to obtain sensitive information about the target for financial, personal, political, or other gains. From an insider threat perspective, an additional motive could be to obtain system/application credentials or cryptographic keys. Shoulder surfing attacks are accomplished by observing the content "over the victim's shoulder", as implied by the name of this attack.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The adversary typically requires physical proximity to the target's environment, in order to observe their screen or conversation. This may not be the case if the adversary is able to record the target and obtain sensitive information upon review of the recording.

Gerekli beceri

  • Low: In most cases, an adversary can simply observe and retain the desired information.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Etki

Başarılı saldırı neye yol açar?

Read Data

Etkilenen alanlar: Confidentiality

Olasılık: High

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Be mindful of your surroundings when discussing or viewing sensitive information in public areas.
2
Pertaining to insider threats, ensure that sensitive information is not displayed to nor discussed around individuals without need-to-know access to said information.

Gerçek dünya

MITRE örnek olayları

Örnek olay 1Detay
An adversary can capture a target's banking credentials and transfer money to adversary-controlled accounts.
Örnek olay 2Detay
An adversary observes the target's mobile device lock screen pattern/passcode and then steals the device, which can now be unlocked.
Örnek olay 3Detay
An insider could obtain database credentials for an application and sell the credentials on the black market.
Örnek olay 4Detay
An insider overhears a conversation pertaining to classified information, which could then be posted on an anonymous online forum.