Examkin

Soru

Zorluk: KolaySocial Engineering Attacks and Vectors

An employee attempting to navigate to an external vendor portal mistypes the domain name in the web browser address bar and is redirected to a fraudulent site designed to mimic the authentic login screen. Which of the following attack vectors is demonstrated in this scenario?

  1. TyposquattingCevap
  2. B
    Spear phishing
  3. C
    Vishing
  4. D
    Baiting

Cevap

Typosquatting
Typosquatting (also known as URL hijacking) occurs when threat actors register domain names that are slight misspellings of legitimate websites to capture traffic from users who make typographical errors.

Adım Adım Çözüm

1
Identify the attack mechanism presented in the scenario.
The user mistyped a legitimate domain name in the browser address bar.
The attack relies on typographical mistakes made during web navigation.
2
Match the mechanism to the correct social engineering attack term.
Registering common misspellings of popular domains to trap users is known as typosquatting (or URL hijacking).
This directly aligns with the definition of typosquatting.

Anahtar Kavram

Typosquatting (URL Hijacking)
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru