Social Engineering Attacks Explained

Social Engineering Attacks Quiz

• Attackers can spoof the login webpage of a financial institution to obtain bank client credentials.
• A watering hole attack exploits a website commonly accessed by members of a targeted organization.
• Elicitation is the act of gaining knowledge or information from a victim without directly asking.
• A threat actor altering the host file for a commonly accessed website on a victim's computer, redirecting the user to a malicious website, is an example of pharming.
• The Social-Engineering Toolkit (SET) is used by threat actors to send spear phishing emails.
• Asterisk is a Voice over IP management tool that can be used to impersonate caller ID.
• A salesperson convincing a customer to buy a product because limited supplies are available is using the social engineering method of scarcity.
• A celebrity endorsing a product on social media is characterized as social proof.
• Apple associates its brand with ideals and values that customers can relate to and support.
• A threat actor sending a phishing email stating suspicious activity on a bank account and urging immediate password change uses the method of urgency.
• Piggybacking is a physical attack where an unauthorized person tags along with an authorized person to gain entry to a restricted area without the authorized person's consent.
• BeEF provides a threat actor with a web console to manipulate users who are victims of cross-site scripting (XSS) attacks
• SpoofApp for Apple iOS and Android can be used to spoof a phone number.
• Access control vestibules mitigate tailgating and piggybacking physical attacks.
• Proximity card and PIN or turnstile are used in conjunction with access control vestibules.
• Security guards can mitigate piggybacking and tailgating.
• SET can launch social engineering attacks and integrate with third-party tools and frameworks such as Metasploit.
• Upper managers such as the CEO or key individuals in an organization are the target of a whaling attack.
• The purpose of a vishing attack is to convince a victim on a phone call to disclose private or financial information.
• SpoofCard spoof a phone number, record calls, and generate different background noises,
• SMS phishing is a social engineering attack when a user enters bank information after receiving a text message about winning bitcoins.
• BeEF permits post-exploitation activities, such as Windows reverse VNC DLL and reverse TCP shell.
• BeEF can send fake notifications to the browser of a victim.
• A new employee posting a picture of their access identification on social media unknowingly enabled badge cloning.
• A user should deliver a found USB pen drive to the security sector of the company.