We might try remote access then. Is he knowledgeable in computer science? I guess he could be an easy target for a phishing attack. Can you get information about the devices he uses? We would also need a subject for the attack so we would need to know his hobbies or stores he goes to