A shoulder surfing attack describes a situation where the attacker can physically view the device screen and keypad to obtain personal information.