Passive threats involve unauthorized interception of data without altering the system, like eavesdropping.