D332 Penetration Testing and Vulnerability Analysis - Set 2 - Part 3

Correct Answer: Using elicited information to send spoofed emails between employees for fraudulent purposes

BEC involves using social engineering to gather enough information to send spoofed emails that appear legitimate, usually to trick employees into making financial transactions.

Correct Answer: The Social Engineering Toolkit, which helps create phishing campaigns and malicious payloads

SET (Social Engineering Toolkit) is a framework in Kali Linux designed for conducting social engineering attacks, including phishing and payload creation.

Correct Answer: A social engineering technique where victims are redirected to fake websites that appear legitimate

Pharming involves redirecting victims to fraudulent websites designed to steal sensitive information, often by altering DNS settings or exploiting vulnerabilities in the system.

Correct Answer: The use of enticing physical media, such as USB drives, to trick victims into inserting it into their machines

Baiting involves leaving malware-laden physical devices like USB drives in public places to lure victims into plugging them into their systems, resulting in compromise.

Correct Answer: A type of phishing conducted over the phone, where attackers try to trick victims into giving up sensitive information

Vishing, or voice phishing, involves attackers using phone calls to deceive victims into providing personal or financial information.

Correct Answer: An attack where hackers compromise websites frequently visited by their target group and inject malicious code

In a watering hole attack, hackers identify websites that are regularly visited by their target group, compromise those sites, and inject malicious code to infect visitors.

Correct Answer: A psychological phenomenon where people copy the actions of others to appear competent or cooperative

Social proof refers to the tendency of individuals to imitate the actions of others in order to fit in or seem competent, which social engineers can exploit in their attacks.

Correct Answer: Short-range, contactless data transmission using passive tags

RFID (Radio-Frequency Identification) is used for transmitting data wirelessly over short distances, often found in ID badges and contactless payment systems.

Correct Answer: Gaining physical access to a secure area by following someone who is authorized

Tailgating refers to an unauthorized person entering a secure area by following closely behind someone who has legitimate access.

Correct Answer: A framework for conducting phishing campaigns and social engineering attacks

SET (Social Engineering Toolkit) is a popular tool in Kali Linux that allows users to create phishing campaigns, craft malicious payloads, and launch various social engineering attacks.