Evil maid attack

Common card · No. 395178

An evil maid attack is a class of cyberattacks on an unattended device, in which an attacker with physical access alters it in some undetectable way so that they can later access the device, or the data on it. In particular, the attack could bypass system passwords and even disk encryption measures in use at the time, and further security mechanisms such as secure boot were needed to mitigate it. The name refers to the threat scenario where a maid could subvert a device left unattended in a hotel room. However, the term broadly applies to any situation where an adversary has physical access to an unattended device.

Read on Wikipedia · Image CC BY-SA 3.0