Examkin

Soru

Zorluk: OrtaSocial Engineering Attacks and Vectors

An administrative assistant at a logistics firm receives an urgent text message on their corporate mobile phone from an unverified short code claiming to be the company's Vice President of Operations. The message asserts that a supplier invoice must be authorized immediately via a provided short link to prevent supply chain disruption, warning that delay will result in severe administrative penalty. Which social engineering attack vector and primary influence principle are demonstrated in this scenario?

  1. Smishing utilizing authority and urgencyCevap
  2. B
    Vishing utilizing social proof and consensus
  3. C
    Spear phishing utilizing familiarity and trust
  4. D
    Whaling utilizing scarcity and intimidation

Cevap

Smishing utilizing authority and urgency
The attack uses SMS text messaging as its transport mechanism, which defines smishing. The attacker leverages the victim's obedience to corporate hierarchy (authority) and creates artificial time pressure backed by threats of punishment (urgency) to force compliance without verification.

Adım Adım Çözüm

1
Identify the communication medium used in the attack scenario.
The message was received via mobile text messaging (SMS), which defines the attack vector as smishing.
Phishing variants are distinguished primarily by medium: email (phishing/spear phishing), voice call (vishing), or SMS (smishing).
2
Analyze the target of the attack versus the identity assumed by the threat actor.
The target is an administrative assistant, while the attacker claims to be a Vice President.
This shows an executive impersonation attack aimed at a staff member, excluding whaling (which targets executives).
3
Determine the psychological influence principles employed by the attacker.
The attacker invokes the rank of Vice President (authority) and demands immediate action under threat of penalty (urgency).
Social engineering tactics manipulate human behavioral triggers to bypass formal operational controls.

Anahtar Kavram

Social Engineering Attack Vectors and Principles of Influence
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru