Examkin

Question

Difficulty: HardSocial Engineering Attacks and Vectors

An enterprise help desk analyst receives an incoming phone call from an individual impersonating a senior IT infrastructure manager. The caller claims that a critical core router has failed, causing an ongoing outage that threatens an upcoming executive board demonstration. The caller insists that standard identity verification protocols must be bypassed immediately to reset an administrative service account credential before board members notice the disruption. Fearing administrative escalation, the help desk analyst performs the credential reset. Which social engineering technique and primary influence tactics were directly leveraged by the attacker?

  1. Vishing and pretexting, leveraging authority and urgencyAnswer
  2. B
    Watering hole attack and impersonation, leveraging consensus and social proof
  3. C
    Smishing and spear phishing, leveraging familiarity and trust
  4. D
    Typosquatting and brand impersonation, leveraging scarcity and intimidation

Answer

Vishing and pretexting, leveraging authority and urgency
The scenario describes a voice-based attack (vishing) in which the adversary invents a believable identity and backstory (pretexting). The attacker exploits the help desk analyst's deference to management hierarchy (authority) and panic over a time-sensitive outage threatening an executive demonstration (urgency) to bypass security procedures.

Step-by-Step Solution

1
Analyze the communication medium used in the scenario.
The attack occurred over a phone call, establishing voice phishing (vishing) as the delivery vector.
Identifying the medium isolates voice-based vectors from email (phishing), text (smishing), or web-based techniques.
2
Evaluate the narrative and identity presented by the adversary.
The attacker created a fabricated scenario and persona (senior IT manager troubleshooting a core outage), which defines pretexting.
Pretexting involves establishing a believable backstory and context to justify compliance with an unauthorized request.
3
Identify the principles of influence applied to manipulate the victim.
The caller asserted executive status (authority) and claimed an immediate critical outage with executive visibility (urgency) to force a bypass of security controls.
Combining high organizational hierarchy with severe time-sensitivity bypasses critical thinking and standard operational procedures.

Key Concept

Social Engineering Delivery Vectors and Principles of Influence
Rate this question

Topics

Social Engineering Attacks and Vectors

More questions from this topic