Match each social engineering incident scenario on the left with the specific social engineering attack vector utilized on the right.
- An attacker leaves malware-laden USB flash drives scattered around an enterprise facility parking lot, relying on curiosity to prompt employees to plug them into networked workstations.Baiting
- An adversary compromises a legitimate third-party industry news portal frequently visited by an enterprise's defense research team to infect visiting users.Watering Hole Attack
- An attacker contacts a system administrator while pretending to be an external compliance auditor and invents an urgent regulatory story to request privileged user access logs.Pretexting
- An adversary intercepts a scheduled physical delivery of server hardware by convincing the logistics driver to deliver the shipment to a secondary unauthorized warehouse.Diversion Theft
Cevap
Baiting corresponds to leaving malware-laden drives in parking lots; Watering Hole Attack corresponds to compromising industry news sites visited by targets; Pretexting corresponds to inventing an auditor persona to obtain logs; Diversion Theft corresponds to re-routing physical shipments.
Each attack vector relies on distinct physical or psychological mechanisms: baiting uses physical curiosity lures; watering hole attacks exploit trust in common third-party websites; pretexting builds a false authoritative scenario to extract data; and diversion theft manipulates logistics to intercept physical equipment.
Adım Adım Çözüm
Anahtar Kavram
Social Engineering Attack Vectors and Methods