Question

Difficulty: EasySocial Engineering and Threat Types

A helpdesk technician receives a call from an individual claiming to be an executive support specialist who urgently needs a user's network password to resolve a critical server outage. Which type of social engineering attack is being attempted?

  1. VishingAnswer
  2. B
    Shoulder surfing
  3. C
    Dumpster diving
  4. D
    Tailgating

Answer

The attack being attempted is vishing (voice phishing).
Vishing is a social engineering attack performed over the telephone where an attacker impersonates a trusted authority to extract sensitive data or login credentials.

Step-by-Step Solution

1
Identify the communication vector used in the scenario.
The attacker is contacting the target via a direct telephone call.
Social engineering attack types are distinguished by their delivery mechanisms.
2
Analyze the attacker's method and purpose.
The attacker uses voice communication and impersonation to trick the technician into disclosing network passwords.
Phishing conducted specifically through voice telephone calls is defined as vishing.

Key Concept

Vishing (Voice Phishing)
Rate this question