← All terms

Eavesdropping Attack

An eavesdropping attack intercepts private communications — network traffic, calls, or conversations — without the participants' knowledge.

An eavesdropping attack is the covert interception of communications the participants believe are private. In security usage it spans two worlds: the digital — capturing network traffic, often called sniffing or snooping — and the physical — simply listening to a phone call taken on speaker in an airport lounge, or a candid debrief in the hotel bar after a conference. Both deliver the same thing: information the target never knew they gave away.

How it works

Digital eavesdropping requires a position on the communication path. Open or poorly secured Wi-Fi is the classic one: on an unencrypted network, a nearby attacker with free packet-capture tooling can read any traffic that is not itself encrypted, and an evil twin access point hands the attacker that position by design. More active variants escalate into full adversary-in-the-middle interception, relaying traffic while reading or modifying it in transit. Physical eavesdropping needs no tooling at all — proximity does the work, which is why trains, lounges, side events, and shared rideshares are where sensitive details most often leak. The two halves of the technique also include a visual cousin, shoulder surfing, and a short-range wireless one, bluesnarfing.

Eavesdropping is usually reconnaissance rather than the end goal. A fragment — a project codename, a vendor dispute, who is on leave — becomes the convincing detail in a later spear-phishing email or vishing call.

How to defend against it

Encryption removes most of the digital risk: enforce TLS on corporate services, tunnel managed devices through an always-on VPN, and treat any network you do not control as hostile — our business travel and conference security guide covers the on-the-road specifics. The physical half is behavioral: take sensitive calls somewhere private, assume public conversations are public, and use privacy filters for screens in transit. Security awareness training should name the scenario explicitly, because employees who would never forward a confidential document will happily discuss its contents at gate B22.

Related terms

Evil Twin AttackAn evil twin attack uses a rogue Wi-Fi access point that mimics a legitimate network to intercept traffic and steal credentials from users who connect.Adversary-in-the-Middle (AiTM)An adversary-in-the-middle (AiTM) attack proxies a real login page to steal both credentials and the session token issued after MFA is completed.Shoulder SurfingShoulder surfing is observing someone's screen or keyboard to steal passwords, PINs, or confidential data — in person or via cameras in public spaces.BluesnarfingBluesnarfing is the unauthorized extraction of data — contacts, messages, files — from a device over a Bluetooth connection the owner never approved.
See your Human Risk Score

NOUSEC simulates attacks across 8 channels and turns the results into one number your board can read.

Book a demo