Which of the following is a sign of a potential vishing attack?

Question

Options

• AAn unexpected email request for confidential information
• BA pop-up ad that requests your username and password
• CAn unsolicited phone call asking for sensitive information
• DA legitimate-looking website asking for your credentials

• B
  6% (2)
• C
  90% (28)
• D
  3% (1)

Explanation

Vishing (voice phishing) specifically refers to social engineering attacks conducted over the phone, making option C correct - an unsolicited call requesting sensitive information is the defining characteristic of this attack vector.

• A is wrong because email-based credential theft is phishing, not vishing.
• B is wrong because a deceptive pop-up is a form of malvertising or pharming, not vishing.
• D is wrong because a fake credential-harvesting website is pharming or spear-phishing, still not phone-based.

Memory tip: The "v" in vishing stands for voice - if the attack uses your ears (a call), it's vishing; if it uses your eyes (email, web), it's a different phishing variant.

No community discussion yet for this question.