D332 Penetration Testing and Vulnerability Analysis - Set 4 - Part 3

Correct Answer: Using information to spoof an email from one employee to another to carry out actions like wire transfers

BEC is a form of social engineering where attackers spoof emails from within a company, often to trick employees into transferring money or sensitive data.

Correct Answer: A malicious communication designed to trick users into performing undesired actions

A hoax is a message or communication designed to deceive users, such as convincing them to delete important system files under the guise of virus removal.

Correct Answer: A Kali Linux tool that helps launch phishing attacks and create malicious payloads

SET is a collection of tools within Kali Linux designed to help PenTesters conduct social engineering attacks, including phishing and malicious payload creation.

Correct Answer: Redirecting users to malicious websites by compromising DNS settings

Pharming is a technique where attackers compromise DNS settings to redirect users to malicious websites that look legitimate, tricking them into entering sensitive information.

Correct Answer: Planting infected media for victims to find and use

Baiting is a social engineering attack where attackers leave infected physical media, such as USB drives, in public places, hoping someone will insert it into their device.

Correct Answer: A phishing attack conducted over the phone or using VoIP services

Vishing is voice phishing, where attackers use phone calls or VoIP systems to trick users into revealing sensitive information.

Correct Answer: Sending fraudulent SMS messages to trick users into revealing personal information

SMiShing is a type of phishing attack that uses SMS text messages to trick victims into clicking malicious links or revealing sensitive information.

Correct Answer: An attack that targets websites frequently visited by specific groups or organizations

A watering hole attack involves injecting malicious code into websites commonly visited by the target group, in hopes of infecting the group's devices.

Correct Answer: Using the actions of others to convince someone to act similarly

Social proof refers to a psychological phenomenon where people are influenced to follow the actions of others, often used in social engineering to manipulate behavior.

Correct Answer: A technology that uses radio waves to read data encoded on RFID tags

RFID (Radio Frequency Identification) technology uses radio waves to read information stored in tags attached to objects, often used for identification and tracking.