Phishing attacks typically occur through which medium?

Question

Options

• AIn-person conversations
• BPhysical mail
• CTelephone calls
• DElectronic communications

• A
  7% (2)
• C
  3% (1)
• D
  90% (27)

Explanation

Electronic communications (D) is correct because phishing is fundamentally a digital deception technique - attackers send fraudulent emails, text messages, or fake websites designed to trick victims into revealing credentials, clicking malicious links, or downloading malware.

The other options describe real social engineering tactics, but they have distinct names: in-person manipulation is called "pretexting" or "tailgating" (A), mail-based fraud is "vishing via postal scams" or simply mail fraud (B), and phone-based deception is specifically called "vishing" (voice phishing) (C). These are related attack vectors, but the unqualified term phishing refers to electronic/digital channels.

Memory tip: The word phishing is a deliberate misspelling of fishing - attackers "cast a line" via email or digital messages and wait for victims to take the bait. The "ph" is a nod to the hacker community's love of letter substitutions, and the whole metaphor is digital by design.

No community discussion yet for this question.