CompTIA Tech+ (FC0-U71)SecurityMedium
A user receives an email that appears to be from their bank, asking them to click a link to verify their account details due to suspicious activity. The email contains the bank's logo and a realistic-looking sender address. However, the link points to a different domain. Which social engineering technique is being attempted?
- ADumpster Diving
- BShoulder Surfing
- CTailgating
- DPhishing
Show answer & explanationAnswer & explanation
Correct answer: D. Phishing
Phishing is a social engineering technique where attackers send fraudulent messages, often via email, disguised as legitimate sources to trick individuals into revealing sensitive information.
Why the other options are wrong
- A. Dumpster diving is sifting through trash to find sensitive information, which is also a physical security method.
- B. Shoulder surfing involves directly observing someone's screen or keyboard to steal information, which is not described.
- C. Tailgating is gaining unauthorized access by following someone through a secured entry point, which is a physical security breach.
Phishing
A social engineering attack where malicious actors impersonate a trustworthy entity in an electronic communication to trick a victim into divulging sensitive information.
- Often uses email or text messages
- Impersonates legitimate organizations (banks, services)
- Aims to steal credentials or install malware
Memory trick: Social engineering plays on trust, tricking minds.