ECSA v10: EC-Council Certified Security Analyst v10

An attacker with malicious intent decides to steal confidential data from a target organization. To obtain this information, the attacker begins testing IoT devices connected to the target network. The attacker monitors network traffic between the IoT devices and the network to determine whether credentials are transmitted in clear text. The attacker also attempts to crack passwords using well-known keywords across all interfaces.

Which IoT threat is the attacker attempting to exploit?