A security analyst reviewing a legacy application discovers that it encrypts every message with a fixed header ('BEGIN-MSG') that an attacker can predict. The attacker has captured many ciphertexts and knows the corresponding header plaintext for each. Using this pairing of known input and output, the attacker attempts to derive the encryption key. Which type of cryptanalytic attack is being conducted?