An employee clicks on a link in an email from what looks like a fellow employee and is taken to a fraudulent website which asks for personal information is an example of:

Question

BlackTom AI · Accepted Answer

Spear phishing targets a specific person or small group by using a believable, personalized message that appears to come from a trusted source in order to trick the recipient into revealing sensitive information or credentials.

Relevant knowledge points and concepts:
- Phishing: broad category of social engineering where attackers send fraudulent messages to obtain sensitive data.
- Spear phishing: a targeted form of phishing that is personalized (e.g., appears to come from a colleague) and aims at a specific individual or organization.
- Pharming: manipulates DNS or host files to redirect users to bogus sites without needing a deceptive email.
- Click fraud: artificially inflating clicks on ads to generate revenue, not about harvesting credentials.
- Identity theft: a consequence of stolen personal data, not the specific attack vector.
- DDoS attack: overwhelms a service with traffic to disrupt availability, unrelated to credential harvesting.

Step-by-step reasoning:
1. The email appears to come from a fellow employee — this indicates personalization and impersonation, hallmarks of spear phishing rather than a generic mass email.
2. The recipient clicks a link and is taken to a fraudulent website — attackers often create convincing replica sites to harvest credentials or personal data.
3. The fraudulent site asks for personal information — the direct goal of spear phishing is to obtain sensitive information from the targeted victim using a believable pretext.

Why the correct answer is correct:
- These characteristics (personalized impersonation, directed at a specific employee, and a fraudulent site requesting personal data) match the definition of spear phishing exactly.

Why other options are incorrect:
- Click fraud: concerns fake ad clicks for revenue, not impersonation or data requests.
- Pharming: involves DNS/host redirection and doesn't require a targeted deceptive email; the scenario specifies a malicious email.
- Identity theft: is the result/purpose of many attacks but not the name of this attack method.
- DDOS attack: aims to disrupt services by traffic overload, not to trick an individual into giving information.

Conclusion: The correct classification is spear phishing, which matches the provided answer.

An employee clicks on a link in an email from what looks like a fellow employee and is taken to a fraudulent website which asks for personal information is an example of: 单项选择题

类似问题

What is the name for emails that are sent to users, pretending to be from their bank and asking for username and password?

What is the name for emails that are sent to users, pretending to be from their bank and asking for username and password?

Phishing is a form of spoofing.

Which of the following is a highly targeted social-engineering attack?

A project has a required return of 12.6 percent, an initial cash outflow of $42,100, and cash inflows of $16,500 in Year 1, $11,700 in Year 2, and $10,400 in Year 4. What is the net present value?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单