An employee who wants to be a technician stands behind a network administrator and watches the administrator type the server password. Later, the employee uses the password to gain access to the server and create a secret administrator account. What specific security threat is this?

A Trojan

B shoulder surfing

C social engineering

D spear phishing