A human resources administrator receives an unexpected phone call from an individual claiming to be a senior IT compliance auditor. The caller asserts that an emergency vulnerability audit of the enterprise payroll database is currently underway and demands immediate provision of temporary administrative credentials to avoid a severe regulatory non-compliance fine. To establish credibility, the caller references specific internal department codes obtained from an employee's public professional profile. Which social engineering technique and combination of influence principles is the attacker primarily utilizing in this attack scenario?
- Pretexting leveraging authority and urgencyCevap
- BWatering hole attack leveraging consensus and familiarity
- CBaiting leveraging scarcity and threat actor motivation
- DPharming leveraging security control misclassification
Cevap
Pretexting leveraging authority and urgency
The correct answer accurately identifies pretexting as the attack mechanism because the adversary builds a fabricated role (an IT compliance auditor) to gain trust and request unauthorized access. Furthermore, the attacker explicitly relies on the principle of authority by posing as an official auditor and the principle of urgency by demanding immediate credential disclosure to avoid regulatory penalties.
Adım Adım Çözüm
Anahtar Kavram
Social Engineering Attack Vectors and Psychological Principles of Influence