A company reports the following incidents:Employees receive WhatsApp messages urging them to verify payroll details via a link. A caller claims to be from IT support and requests a password reset over the phone. Staff are asked to scan a QR code on a printed flyer to “update security settings.” Which sequence correctly classifies these attacks?

Question

BlackTom AI · Accepted Answer

Smishing refers to phishing delivered over SMS/instant messaging, vishing is phishing over voice/telephone calls, and quishing is phishing that uses QR codes to direct victims to malicious sites.

1) Relevant knowledge points:
- Phishing is social-engineering to steal credentials or deliver malware; delivery channel defines the subtype.
- Smishing = SMS or messaging apps (WhatsApp) with malicious links.
- Vishing = telephone/voice-based social engineering to extract info.
- Quishing = QR-code-based attacks that redirect users to malicious URLs.

2) Step-by-step classification of each incident:
- “Employees receive WhatsApp messages urging them to verify payroll details via a link.” WhatsApp is an instant messaging channel and the attack uses a link to phish payroll details. This matches smishing (phishing via SMS/instant message).
- “A caller claims to be from IT support and requests a password reset over the phone.” This uses a phone call and voice social engineering to obtain credentials—classic vishing (voice phishing).
- “Staff are asked to scan a QR code on a printed flyer to ‘update security settings.’” The lure uses a QR code to send users to a (presumably malicious) URL—this is quishing (QR-code phishing).

3) No numeric calculations; reasoning is channel-based classification.

4) Why the correct answer is correct:
- Each label corresponds to the attack channel: messaging → smishing, phone call → vishing, QR code → quishing. The sequence Smishing, Vishing, Quishing correctly maps to the three incidents in order.

5) Why the other options are incorrect:
- a (Smishing, Quishing, Vishing) swaps the last two; the phone call attack is vishing, not last.
- b (Quishing, Vishing, Smishing) mislabels the first incident as quishing and third as smishing—channels don’t match.
- c (Vishing, Smishing, Quishing) reverses the first two; the WhatsApp message is smishing, not vishing.

Conclusion: The correct sequence is Smishing, Vishing, Quishing, matching option d.

类似问题

An organisation experiences:A QR code embedded in an email attachment leads to a credential harvesting site. A WhatsApp message urges users to confirm banking details. A voicemail asks employees to call back and verify their password. Which sequence correctly classifies these attacks?

A project has a required return of 12.6 percent, an initial cash outflow of $42,100, and cash inflows of $16,500 in Year 1, $11,700 in Year 2, and $10,400 in Year 4. What is the net present value?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单