Examkin

Soru

Zorluk: OrtaSocial Engineering Attacks and Vectors

During a routine audit, an incident response team discovers that multiple remote employees entered their domain credentials into a web page that visually duplicated the organization's authentic single sign-on (SSO) portal. Investigation reveals that the domain name used in the attack was registered by an external third party and contained a single transposed letter relative to the official enterprise URL. Which social engineering attack vector was directly executed in this scenario?

  1. TyposquattingCevap
  2. B
    Watering hole attack
  3. C
    Spear phishing
  4. D
    Vishing

Cevap

Typosquatting is the correct vector, as it explicitly relies on registering slight misspellings or character transpositions of legitimate domain names to trick users into visiting deceptive websites.
Typosquatting (also known as URL hijacking) occurs when an attacker registers domain names that are slight misspellings, character swaps, or variations of a legitimate domain. When users inadvertently type the wrong address or follow a link to the spoofed domain, they are presented with a fraudulent site designed to harvest sensitive information such as SSO credentials.

Adım Adım Çözüm

1
Analyze the scenario indicators
The attacker registered a look-alike domain with a transposed letter pointing to a cloned SSO landing page.
Identifying the specific mechanism used by the attacker establishes the underlying social engineering category.
2
Compare against social engineering definitions
Registering URLs that mirror legitimate corporate domains via misspellings/transpositions matches the exact definition of typosquatting (URL hijacking).
Differentiating between delivery mechanisms (email vs. phone vs. fake domain registration) ensures correct vector classification.

Anahtar Kavram

Typosquatting (URL Hijacking)
Bu soruyu puanla

Konular

Social Engineering Attacks and Vectors

Bu konudan daha fazla soru