$9$ points

Given the scenario, indicate what type of security attack is being used:

An attacker was successful in stealingsbout $100,000$ people's credit card information from a major retailer's database, including the cards' names and numbers. The cards' PINs were not included with the information obtained. The attacker determines that they can simply try to guess the PIN number for at least some of the cards. Since there are only $1000$ combinations for a $4$ digit PIN, if the attacker writes a script to select a random PIN and try it out on all $100,000$ cards, it is likely that PIN will be correct for about $100$ of the cards $(100,000/1000)$; and the attacker could try a few random PINs before the banks start getting suspicious, which means they will end up with a few hundred cards they can use as they wish.

$($Hint: To determine the type of attack, focus on how the attack is being executed, rather than what the attacker is trying to accomplish

Brute Force

Malware

Man$-$in$-$the$-$Middle

Social Engineering