A cyberattacker notices a security flaw in a software that a company is using. They decide to tailor a specific worm to exploit this flaw and extract saved passwords from the software. To which…

Weaponization is the stage where the attacker combines an exploit (the tailored worm designed to leverage the security flaw) with a malicious payload (to extract passwords) into a deliverable package. This combination creates the weapon that will be used to achieve the attacker's objectives.

Reconnaissance is the stage where the attacker gathers information about the target, such as identifying the software flaw, but does not involve creating the attack tool itself.

Delivery is the stage where the weaponized artifact is transmitted to the target, such as via email or a compromised website, not the creation of the artifact.

Exploitation is the stage where the weaponized artifact successfully executes and leverages the vulnerability to gain access, occurring after the weapon has been delivered.