Match each social engineering attack vector to the enterprise incident scenario that best exemplifies its delivery method and tactics.
- Watering Hole AttackAttackers compromise a niche third-party industry news portal heavily frequented by target defense contractors to silently serve zero-day browser exploits.
- Voice Phishing (Vishing)Attackers place targeted phone calls to helpdesk technicians, posing as executive leadership to coerce urgent, unauthorized account password resets.
- TyposquattingAttackers register a domain featuring a subtle character substitution to host a replica login portal designed to harvest single sign-on credentials.
- BaitingAttackers place malware-laden USB drives labeled 'Q3 Executive Bonuses' across an enterprise facility parking lot to entice curiosity-driven execution.
Answer
Watering Hole Attack matches the compromised industry news portal scenario; Voice Phishing matches the targeted helpdesk phone calls scenario; Typosquatting matches the character substitution domain replica scenario; Baiting matches the malware-laden USB drive parking lot scenario.
Each social engineering vector is uniquely aligned with its underlying vehicle: watering hole targets trusted third-party websites; vishing relies on phone-based social engineering and pretexting; typosquatting targets URL typing mistakes; and baiting exploits curiosity through physical media dropped in accessible areas.
Step-by-Step Solution
Key Concept
Social Engineering Attack Vectors and Vectors of Influence