Physical & Hybrid Attacks 20 articles

Summary ATM Skimming is a type of application attack where criminals use unauthorized devices to capture card data and PINs from Automated Teller Machines (ATMs) to commit fraud and theft.…

Summary Badge Cloning is a type of application attack where an attacker duplicates an authorized access badge or credential to gain unauthorized entry into secure physical or digital environments. This…

Summary BIOS/UEFI attacks target the firmware layer of computer systems, compromising the Basic Input/Output System (BIOS) or Unified Extensible Firmware Interface (UEFI) to gain persistent, low-level control over a device.…

Summary Cold Boot Attacks exploit the data remanence property of DRAM to retrieve sensitive information from a computer’s memory after a system reboot or power loss. Attackers physically access a…

Summary Device Theft is a type of application attack where an adversary physically steals a computing device, such as a laptop, smartphone, or tablet, to gain unauthorized access to sensitive…

Summary Evil Maid Attacks are a type of physical security threat where an attacker gains unauthorized access to a device, typically a laptop or encrypted system, by tampering with it…

Summary Firmware Tampering is a type of application attack where an adversary modifies or manipulates the firmware of a device to gain unauthorized control, bypass security mechanisms, or introduce persistent…

Summary Hardware backdooring is a type of application attack where malicious modifications are made to hardware components or embedded systems to create unauthorized access points or vulnerabilities. These backdoors can…

Summary Hardware keylogging is a type of application attack where physical devices are used to capture keystrokes from a target computer, enabling attackers to steal sensitive information such as passwords,…

Summary Insider-Assisted Physical Attacks involve malicious insiders who leverage their authorized physical access to facilities or systems to compromise organizational security, often bypassing traditional cybersecurity defenses. These attacks exploit trust…

Summary Malicious USB Devices, commonly known as BadUSB, are compromised USB hardware that exploit firmware vulnerabilities to execute unauthorized actions, such as injecting malicious code, stealing data, or taking control…

Summary Physical Network Tapping is a cybersecurity attack where an adversary gains unauthorized access to a network by physically connecting to network cables or devices to intercept data transmissions. This…

Summary Piggybacking is a type of application attack where an unauthorized user gains access to a system or network by exploiting an active session or connection established by an authorized…

Summary POS Tampering is a type of application attack targeting Point of Sale (POS) systems by manipulating hardware or software components to steal payment card data or disrupt transactions. Key…

Summary RFID Skimming is a type of application attack where an attacker uses unauthorized RFID readers to capture data from RFID-enabled devices or cards without the owner's knowledge. This attack…

Summary Rogue Hardware Implants are unauthorized physical devices covertly installed within hardware systems to intercept, manipulate, or exfiltrate sensitive data, posing significant risks to organizational security. These implants can bypass…

Summary Shoulder Surfing is a social engineering attack where an attacker observes a victim’s private information by looking over their shoulder or through other direct visual means. This technique targets…

Summary Supply Closet Intrusion is an application attack where adversaries exploit vulnerabilities in overlooked or poorly secured internal systems, often disguised as routine maintenance or supply management tasks, to gain…

Summary Tailgating is a physical security attack where an unauthorized individual gains access to a restricted area by closely following an authorized person without proper authentication. Key Characteristics Exploits human…

Summary USB Drop Attacks involve malicious actors leaving infected USB drives in public or targeted locations, hoping victims will connect them to their devices, leading to unauthorized access, malware installation,…