A security analyst is investigating a multi-vector social engineering campaign targeting an organization's accounting department. The incident report highlights two distinct activities: first, an attacker placed a direct phone call to a payroll clerk, posing as an executive and demanding an immediate wire transfer; second, several accountants received SMS text messages on their corporate mobile devices containing links to a fraudulent login page designed to harvest credentials. Which of the following social engineering attack vectors were executed during this campaign? (Select TWO.)
- Vishing (voice phishing) targeting the payroll clerk via direct telephone communications.Cevap
- Smishing (SMS phishing) targeting accounting staff through text messages.Cevap
- CWatering hole attack compromising a third-party payroll vendor website.
- DTyposquatting utilizing fraudulent domain names to misdirect web browser traffic.
Cevap
Vishing (voice phishing) targeting the payroll clerk via direct telephone communications, and Smishing (SMS phishing) targeting accounting staff through text messages.
The campaign incorporated vishing because the attacker initiated telephone calls to impersonate an executive, leveraging voice communication. Additionally, smishing was executed through SMS text messages delivered to employee mobile devices containing malicious credential harvesting links.
Adım Adım Çözüm
Anahtar Kavram
Distinguishing social engineering vectors based on communication medium (voice vs. SMS text message)
Tahmini Süre:1m 30s