An enterprise help desk analyst receives an incoming phone call from an individual impersonating a senior IT infrastructure manager. The caller claims that a critical core router has failed, causing an ongoing outage that threatens an upcoming executive board demonstration. The caller insists that standard identity verification protocols must be bypassed immediately to reset an administrative service account credential before board members notice the disruption. Fearing administrative escalation, the help desk analyst performs the credential reset. Which social engineering technique and primary influence tactics were directly leveraged by the attacker?
- Vishing and pretexting, leveraging authority and urgencyCevap
- BWatering hole attack and impersonation, leveraging consensus and social proof
- CSmishing and spear phishing, leveraging familiarity and trust
- DTyposquatting and brand impersonation, leveraging scarcity and intimidation
Cevap
Vishing and pretexting, leveraging authority and urgency
The scenario describes a voice-based attack (vishing) in which the adversary invents a believable identity and backstory (pretexting). The attacker exploits the help desk analyst's deference to management hierarchy (authority) and panic over a time-sensitive outage threatening an executive demonstration (urgency) to bypass security procedures.
Adım Adım Çözüm
Anahtar Kavram
Social Engineering Delivery Vectors and Principles of Influence