Examkin

Soru

Zorluk: OrtaSocial Engineering Attacks and Vectors

A security analyst is reviewing incident reports from remote staff who experienced a coordinated social engineering campaign. Several employees received text messages on their corporate mobile devices containing links to a counterfeit login portal, while other employees received phone calls from an attacker posing as IT support attempting to obtain credential resets. Which of the following social engineering attack vectors were executed during this incident? (Select TWO.)

  1. SmishingCevap
  2. VishingCevap
  3. C
    Watering hole attack
  4. D
    Typosquatting

Cevap

Smishing and Vishing
Smishing describes social engineering attacks delivered via SMS text messages, matching the text messages sent to corporate mobile devices. Vishing describes voice-based phishing over telephone calls, matching the attacker calling employees while impersonating IT support staff. Both options accurately reflect the attack vectors described in the scenario.

Adım Adım Çözüm

1
Identify the vector used in the text message delivery channel.
SMS text messages sent to mobile devices with malicious links constitute smishing.
Phishing attempts conducted via Short Message Service (SMS) are defined as smishing.
2
Identify the vector used in the telephone delivery channel.
Telephone calls where an attacker impersonates IT support personnel constitute vishing.
Voice-based telephone social engineering is defined as vishing.
3
Distinguish correct communication channels from web-based or domain-based attack techniques.
Watering hole attacks and typosquatting do not involve direct text message or voice communication channels.
Watering hole attacks compromise specific websites, while typosquatting targets URL misspellings.

Anahtar Kavram

Identification of social engineering attack vectors based on communication medium
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru