In-Person Attack Sorter — TechKnowSurge

About this interactive

What you are doing: naming the in-person attack in each scenario. Shoulder surfing: an adversary secretly watches a user of a cash machine, a computer or another device to get their access information, such as a PIN or a password. Tailgating: an unauthorized person follows an authorized person through an entry point without consent; the victim never noticed. Piggybacking: the same, but with consent; the victim knowingly holds the door or lets the attacker through, assuming they belong. USB drop: the attacker leaves infected thumb drives where the target’s people will find them, hoping someone plugs one in. How to use it: for a door, ask whether the authorized person knowingly let them in. Yes is piggybacking, no is tailgating.

What you'll learn

Name the in-person social engineering attack in a scenario: shoulder surfing, tailgating, piggybacking or a USB drop
Tell tailgating from piggybacking by whether the authorized person consented to letting the attacker through

Aligned to

CompTIA Security+

5.6 Given a scenario, implement security awareness practices.

CompTIA PenTest+

3.3 Explain physical security concepts.

Key terms

Shoulder Surfing: An attack in which an adversary physically observes a victim entering credentials or access information by looking over their shoulder or from close proximity.
Tailgating: A physical security breach where an unauthorized person follows an authorized individual through a secured entry point without presenting credentials.
Piggybacking: A physical security attack where an unauthorized person follows an authorized person through a secured entry point with the authorized person's consent, typically by deceiving them.
USB Drop Attack: An attack in which an adversary places an infected USB drive in a public or targeted location, hoping a victim will plug it into a computer and unknowingly install malware.

Topics

Shoulder Surfing Tailgating Piggybacking Usb Drop Attack Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →