Question

Difficulty: MediumSocial Engineering and Threat Types

A helpdesk technician is reviewing several recent security incident logs across the organization. Match each reported security incident scenario on the left to its corresponding threat type on the right.

  • An employee receives a text message on their mobile phone claiming their financial account is compromised, containing a shortened link to verify credentials.Smishing
  • A system administrator discovers hidden software that altered kernel-level system files to conceal unauthorized backdoor access from Task Manager.Rootkit
  • An unbadged visitor carrying a large package follows an employee closely through a secure door immediately after the employee scans their access card.Tailgating
  • A user reports that all local files have been encrypted with an unrecognized extension and a text file demands cryptocurrency payment to unlock them.Ransomware

Answer

Smishing matches the SMS text message lure scenario; Rootkit matches the kernel-level process hiding scenario; Tailgating matches the physical intrusion following an authorized employee scenario; Ransomware matches the file encryption demanding payment scenario.
Each scenario represents a classic security threat vector: SMS-based phishing is smishing, kernel-level hiding malware is a rootkit, following someone through a secure door without authentication is tailgating, and encrypting files for extortion is ransomware.

Step-by-Step Solution

1
Analyze the first scenario involving an SMS text message sent to a mobile phone attempting to harvest credentials.
Identify this attack vector as Smishing (SMS Phishing).
Phishing conducted specifically over SMS text messages is categorized as smishing.
2
Analyze the second scenario involving software that alters kernel files and hides processes from management utilities.
Identify this malware type as a Rootkit.
Rootkits operate deep within the operating system kernel to maintain administrative access and cloak their presence.
3
Analyze the third scenario involving an unbadged individual physically following a badged worker through a secure entryway.
Identify this physical security breach as Tailgating.
Tailgating relies on social compliance or physical proximity to bypass electronic physical access controls.
4
Analyze the fourth scenario involving file encryption and a demand for cryptocurrency payment.
Identify this malware attack as Ransomware.
Extortion via file encryption and decryption ransom demands defines ransomware.

Key Concept

Social Engineering and Malware Threat Classifications
Estimated Time:1m 30s
Rate this question