social engineering techniques, tricking a user to reveal their password eavesdropping, on unencrypted network traffic password dumps, if the user uses the password in one dump, it could be used across many services. brute-force password attacks