Soru

Zorluk: KolaySocial Engineering and Threat Types

A helpdesk technician receives a call from an individual claiming to be an executive support specialist who urgently needs a user's network password to resolve a critical server outage. Which type of social engineering attack is being attempted?

  1. VishingCevap
  2. B
    Shoulder surfing
  3. C
    Dumpster diving
  4. D
    Tailgating

Cevap

The attack being attempted is vishing (voice phishing).
Vishing is a social engineering attack performed over the telephone where an attacker impersonates a trusted authority to extract sensitive data or login credentials.

Adım Adım Çözüm

1
Identify the communication vector used in the scenario.
The attacker is contacting the target via a direct telephone call.
Social engineering attack types are distinguished by their delivery mechanisms.
2
Analyze the attacker's method and purpose.
The attacker uses voice communication and impersonation to trick the technician into disclosing network passwords.
Phishing conducted specifically through voice telephone calls is defined as vishing.

Anahtar Kavram

Vishing (Voice Phishing)
Bu soruyu puanla