Which attack method is MOST likely to be used by a malicious employee or insider trying to obtain another user's passwords?
1) Phishing
2) Shoulder surfing
3) Tailgating
4) On-path attack