Which of the following is a common attack vector for mobile devices?

Question

Options

• ABuffer overflow
• BPhishing via SMS (Smishing)
• CSQL injection
• DMan-in-the-middle

• A
  7% (3)
• B
  86% (36)
• C
  2% (1)
• D
  5% (2)

Explanation

Phishing via SMS, known as smishing, is a mobile-specific attack where threat actors send fraudulent text messages to trick users into revealing credentials or clicking malicious links - it exploits the trust users place in SMS and the limited screen context on phones.

Why the distractors are wrong:

• A (Buffer overflow): Primarily targets software/OS memory management and is not specific to mobile devices - it's a classic exploit for desktop applications and system software.
• C (SQL injection): Targets backend databases through web application input fields, not the mobile device itself.
• D (Man-in-the-middle): While MitM attacks can affect mobile users (e.g., on public Wi-Fi), they are not mobile-specific - they apply equally to any networked device.

Memory tip: Think of the "S" in Smishing = SMS = Smartphone. The question asks for a common and mobile-specific vector - smishing is the only choice tied directly to a feature unique to mobile devices (text messaging).

No community discussion yet for this question.