The security team has detected an ongoing spam campaign targeting the organization. The team's approach is to push back the cyber kill chain and mitigate ongoing incidents. At which phase of the…

The 'Actions on Objectives' phase occurs much later, after successful exploitation and installation, when the attacker achieves their ultimate goals.

A spam campaign is an attempt to deliver a weaponized payload (e.g., malicious links or attachments) to the target, which precisely aligns with the 'Delivery' phase of the cyber kill chain.

The 'Reconnaissance' phase involves gathering information about the target, which precedes the actual delivery of an attack.

The 'Installation' phase occurs after successful delivery and exploitation, when the attacker establishes persistent access to the victim's system.