An investigator recently discovered that an attacker placed a remotely accessible CCTV camera in
a public area overlooking several Automatic Teller Machines (ATMs). It is also believed that user
accounts belonging to ATM operators may have been compromised. Which of the following
attacks has MOST likely taken place?

A.
Shoulder surfing

B.
Dumpster diving

C.
Whaling attack

D.
Vishing attack

Explanation:
The CCTV camera has recorded people entering their PINs in the ATMs. This is known as
shoulder surfing.
Shoulder surfing is using direct observation techniques, such as looking over someone’s shoulder,
to get information. Shoulder surfing is an effective way to get information in crowded places
because it’s relatively easy to stand next to someone and watch as they fill out a form, enter a PIN
number at an ATM machine, or use a calling card at a public pay phone. Shoulder surfing can also
be done long distance with the aid of binoculars or other vision-enhancing devices. To prevent
shoulder surfing, experts recommend that you shield paperwork or your keypad from view by
using your body or cupping your hand.