Physical Proximity

Physical Proximity

Attacks where the adversary needs to be physically near you, your device, or your environment. Often overlooked in digital threat modeling but disproportionately effective — especially during travel, at borders, in hotels, and at protests.

Sub-vectors (planned)

• Juice jacking — malicious USB charging ports / cables (e.g., O.MG cable). Use power-only adapters or your own battery.
• Evil maid — unattended device tampering (firmware implant, hardware keylogger, disk image). See Traveling DFP.
• BLE / UWB tracking — AirTags, Tile, SmartTags planted on a target. See Tracking Prevention.
• Shoulder surfing / camera capture — observation of PIN, screen, or keyboard. Privacy screens, hand-shielded entry.
• RFID skimming — payment cards, badges, passports. Faraday sleeves; check card chip type.
• Hardware keyloggers — inline USB devices, KVM implants. Inspect peripherals on shared/borrowed machines.
• Cold-boot attack — RAM extraction from a recently-powered-off device. Mostly a high-end threat.

Related

• Adversary Threats Catalog
• Tracking Prevention
• Traveling DFP
• Physical Security