Examkin

Question

Difficulty: Very hardSocial Engineering Attacks and Vectors

An organization's incident response team is dissecting a multi-channel cyber attack targeting a senior system administrator. The adversary first conducted open-source intelligence (OSINT) gathering on public code repositories to obtain personal details and active project names. Next, the attacker placed a direct voice call to the administrator's personal mobile phone impersonating an IT service desk director, claiming that emergency maintenance was required immediately to prevent critical domain service disruption. During the call, the administrator was instructed to follow a link sent via a cellular text message to enter their administrative single sign-on (SSO) credentials into a fake authentication portal. Which combination of social engineering attack vectors and primary principles of influence were executed by the adversary in this incident?

  1. Vishing and smishing leveraging authority and urgencyAnswer
  2. B
    Spear phishing and whaling leveraging trust and social proof
  3. C
    Pretexting and baiting leveraging consensus and scarcity
  4. D
    Pharming and watering hole leveraging intimidation and consensus

Answer

The attack combination consists of vishing and smishing leveraging authority and urgency.
The scenario describes an adversary using direct phone communication to manipulate a target, which defines vishing (voice phishing), combined with malicious links delivered via SMS text message, which defines smishing. The psychological leverage relies on assuming the identity of an executive IT director to project authority and creating a high-stress emergency timeline to induce urgency.

Step-by-Step Solution

1
Analyze the primary delivery channels used during the attack scenario.
The adversary utilized voice communication over the phone (vishing) and short message service texts (smishing) to deliver the malicious credential harvesting portal.
Identifying communication media distinguishes specific social engineering attack vectors from standard email phishing.
2
Evaluate the psychological principles of influence applied to manipulate the target.
The attacker established a persona of an IT service desk director (authority) and stressed an emergency outage prevention timeline (urgency).
Recognizing principles of influence explains how adversaries compel targets to bypass standard security controls.
3
Synthesize vector identification with psychological principles to select the correct description.
The combination of voice and SMS delivery tied to authority and urgency accurately models the multi-vector campaign.
Ensures complete alignment between technical attack execution and human factor vulnerabilities.

Key Concept

Social Engineering Attack Vectors and Psychological Principles of Influence
Estimated Time:3m 0s
Rate this question

Topics

Social Engineering Attacks and Vectors

More questions from this topic