Match each social engineering threat or attack vector on the left with its corresponding attack description on the right.
- PretextingAn attacker creates a fabricated scenario while impersonating a compliance auditor to manipulate an employee into disclosing internal system credentials.
- Shoulder SurfingAn unauthorized individual visually observes an user entering access codes or passwords in a crowded setting.
- Watering Hole AttackAn attacker compromises a specific third-party website frequently visited by employees of a targeted organization to deliver malware.
- TyposquattingAn attacker registers domain names with subtle spelling errors of popular websites to trick users into visiting malicious landing pages.
Cevap
Pretexting matches the creation of a fabricated scenario by an auditor impersonator; Shoulder Surfing matches visual observation of passwords; Watering Hole Attack matches compromising a frequently visited industry website; Typosquatting matches registering misspelled domain names.
Each attack vector is matched to its defining characteristic: Pretexting involves creating a believable false context or identity; Shoulder Surfing involves physical line-of-sight observation; Watering Hole Attacks infect legitimate sites known to be frequented by targets; Typosquatting exploits user mistyping in web addresses.
Adım Adım Çözüm
Anahtar Kavram
Social Engineering Tactics and Attack Vector Classification