Match each social engineering attack vector on the left with its corresponding attack scenario description on the right.
- TyposquattingAn attacker registers domain names closely resembling an enterprise web portal to capture credentials from users who mistype the URL.
- VishingA scammer places phone calls pretending to be enterprise IT support to trick users into revealing network passwords.
- Watering Hole AttackAn adversary compromises a legitimate, industry-specific news website that targeted employees regularly visit.
Answer
Typosquatting pairs with registering domain names resembling enterprise portals to capture mistyped URL entries; Vishing pairs with phone calls pretending to be IT support soliciting passwords; Watering Hole Attack pairs with compromising a trusted industry-specific website visited by targeted personnel.
Each social engineering vector matches its specific operational mechanism: Typosquatting takes advantage of mistyped domain names, Vishing uses telephone-based pretexting, and Watering Hole attacks compromise trusted third-party websites visited by target groups.
Step-by-Step Solution
Key Concept
Social Engineering Delivery Vectors