Name generator attack

• A. An attacker tries to brute-force a password
• B. An attacker uses shoulder-surfing to capture data
• C. An attacker asks the victim to combine pieces of personal data to produce a name
• D. An attacker steals data by malware

Answer: (C)

Name generator attacks are a social engineering tactic where the attacker uses pieces of a person’s personal information to induce them to create a plausible name, such as a password or username, by combining those details. The attacker might ask questions about a birth year, pet’s name, or other familiar data and guide the victim to blend them into a single name. This exploits the tendency to create memorable, personal-looking credentials, making it easier for the attacker to guess or reuse them in later steps.

That’s why this option is the best description: it directly describes the attacker prompting the victim to assemble personal data into a name. The other options describe different attack methods—brute-forcing is automated guessing, shoulder-surfing is visually capturing data, and malware steals data—none of which involve the victim generating a name from personal clues.