Shoulder surfing is a term might for the criminal practice used by thieves to steal personal through improved spying techniques as one uses electronic devices, an ATM, laptop, public kiosk or such. The risk of personal data in a thief’s hand could mean a total financial loss, wrongful use of data captured for criminal activities, loss of identity and more. Thus what started in the pay-phone days and using the phone-card numbers to make telephone calls, graduated to use of ATM PINs wrongly gathered to use debit, credit and gift cards to make purchases, buy gas, or steal from gullible people in what is known as a shoulder surfing attack.
In this article let us look at:
Shoulder surfing occurs when one uses public places and shares personal details. It could be at pads for PINs, kiosks, ATMs when laptops/ smartphones are used when entering in data that is personal. The thieves are smart and not noticeable, as they can also be found at the lounges in an airport, bar, restaurant, bus, subway, train etc., and use innovative shoulder surfing examples and means to capture data. For Ex: miniature cameras, binoculars, phone cameras etc. Technology is so advanced that they skim the PINs at a shoulder surfing ATM using electronic keypads, eavesdrop on conversations, and fool people into revealing the SSNs or OTPs and more.
Shoulder surfing can empty one’s account, place one’s details for criminal activities, steal identities, hijack accounts and more. It mostly happens because many people use the same passwords for multiple accounts. For Ex: One may use Instagram, internet banking and other accounts on a common password that contains the date of birth, middle names etc.
When a shoulder surfer can capture the password for one account logged into at the subway, for example, one compromises all accounts! The thieves can record finger movements when using the ATM from a distance of 10 feet! Some people write their passwords down and store them on phones or in their purses! One indiscretion is all that is needed for thieves to get the account password and empty the bank account, steal personal information and compromise identities.
Here are some protective steps to use against the shoulder surfers.
The risks of shoulder surfing by hackers and thieves are ever-present and very real in today’s technologically enabled world. It can happen with or without one’s knowledge and across devices like computers, phones, smartphones, laptops, etc. used in public places or without being aware and protected. The above article discusses some common ways of avoiding shoulder surfing, preventing shoulder-surfers from getting one’s personal information, what to do in case one falls into a fraud trap, and the method commonly used by shoulder surfers. Being aware and careful is the best way to counter hacking and frauds. Shoulder surfing prevention is always and has always been the best cure to shoulder surfing.
So, have you made up your mind to make a career in Cyber Security? Visit our Master Certificate in Cyber Security (Red Team) for further help. It is the first program in offensive technologies in India and allows learners to practice in a real-time simulated ecosystem, that will give you an edge in this competitive world.