Shouldering is best described as?

• A. An attack designed to steal a victim's password or other sensitive data by watching them provide sensitive information
• B. A phishing attack
• C. A brute force attack
• D. A malware infection

Answer: (A)

Shouldering is a physical social‑engineering risk where someone watches you enter passwords or other sensitive data in order to steal it. This isn’t about tricks via email or fake websites, nor about guessing passwords or installing malicious software. It exploits visibility and a moment of vulnerability in public or shared spaces. To stay safe, shield the input area, be aware of who’s nearby, and use additional protections like two-factor authentication.