Password capture attacks involve directly obtaining the
password, or part thereof, by capturing login credentials
when entered by the user, or by tricking the user into
divulging their password. Shoulder-surfing, phishing, and
some kinds of malware are three common forms of
capture attacks. In shoulder-surfing, credentials are captured
by direct observation of the login process or through
some external recording device such as a video camera.
Phishing is a type of social engineering attack where users
are tricked into entering their credentials at a fraudulent
website that records users’ input. Malware uses
unauthorized software installed on client computers or
servers to capture keyboard, mouse, or screen output,
which is then parsed to find login credentials.