Examkin

Question

Difficulty: MediumSocial Engineering and Threat Types

A payroll specialist at a healthcare organization receives an unsolicited telephone call from an individual claiming to be a senior support engineer for the company's VoIP telephony provider. The caller claims that critical system upgrades are underway and requests that the specialist verify their network password over the phone to prevent service disruption. Which of the following social engineering threat types is occurring?

  1. VishingAnswer
  2. B
    Smishing
  3. C
    Spear phishing
  4. D
    Dumpster diving

Answer

Vishing
Vishing (voice phishing) involves using phone calls or voice communication technology to manipulate victims into handing over confidential credentials or personal data.

Step-by-Step Solution

1
Analyze the communication channel described in the attack scenario.
The attacker initiated contact via a direct, interactive telephone call.
The delivery vector narrows down the specific social engineering classification.
2
Evaluate the tactic and objective of the attacker.
The attacker impersonated a technical authority figure to request login credentials over the phone.
Voice-based social engineering designed to harvest credentials is classified as vishing.

Key Concept

Vishing (Voice Phishing)
Estimated Time:1m 0s
Rate this question

Topics

Social Engineering and Threat Types

More questions from this topic