Question

Difficulty: EasySocial Engineering Attacks and Vectors

A customer service representative receives an incoming telephone call from an individual claiming to be an internal network administrator. The caller states that an urgent system maintenance procedure requires the representative to verbally confirm their network login credentials. Which of the following social engineering attack vectors is occurring?

  1. VishingAnswer
  2. B
    Smishing
  3. C
    Phishing
  4. D
    Shoulder surfing

Answer

Vishing
Vishing (voice phishing) specifically describes social engineering attacks conducted via telephone calls or voice communications where the attacker impersonates a trusted entity to extract sensitive information.

Step-by-Step Solution

1
Analyze the communication medium in the scenario
The attack is carried out over an incoming telephone phone call.
Identifying the medium (voice vs text vs email vs physical observation) is key to classifying the attack vector.
2
Evaluate the social engineering vector based on voice communication
Voice-based pretexting and fraud conducted over the telephone is defined as voice phishing (vishing).
The prefix 'vish' stands for voice phishing, matching phone call scenarios.

Key Concept

Vishing (Voice Phishing)
Estimated Time:45s
Rate this question