# Dispersion Attack

```mermaid
sequenceDiagram
    participant User
    participant Threat Actor
    participant nKode Server
    Threat Actor ->> Threat Actor: Get User's email/keypad icons
    Threat Actor ->> User: Send Phishing Email
    Note left of User: Recieves Email:<br/>Subject: Urgent<br/>Body: Click the link to verify your account https://www.nkod3.tech
    User ->> Threat Actor: Clicks link
    Threat Actor -->> User: Fake nKode Login Page
    Note left of User: Login Page<br/>{{nkode_keypad1}}
    User ->>+ Threat Actor: key selection {{key_selection1}} 
    Threat Actor ->> Threat Actor: Disperse Keypad 
    Threat Actor -->>- User: Invalid nKode Try Again
    Note left of User: Login Page<br/>{{nkode_keypad2}}
    User ->> Threat Actor: key selection {{key_selection2}} 
    Threat Actor ->> Threat Actor: Deduce the user's nKode 
    Threat Actor ->> nKode Server: {{user_passcode}}
    nKode Server -->> Threat Actor: Success 
```