76 - Physical Attacks

Baiting

Use of a bait to attract victim, for example an USB drive or pair of keys

Dumpster Diving

Collecting and analysing discarded items or scraps from a victim to gain information

Sanitization

Removal of sensitive data so that it can't be recovered at all

Hardware Sanitization : Degaussing

The destruction of the magnetic domains of a HDD plate using a degausser

Software Sanitization : Wiping/Overwriting/Shredding

Overwriting the data sectors with new information in patterns in cycles to ensure original information is replaced

Keylogging

Interception and recording, secretly, of what an user is typing, either software or hardware

Piggybacking/Shoulder Surfing

The ability of an attacker to enter an area or access information by following someone that has the ability to access it