A user receives a phone call from a person claiming to be from technical support. This person knows the user's name and that the user has Windows installed on their computer. The technician directs…

This scenario is a classic social engineering attack where the attacker uses personal details (the user's name and OS) to establish false credibility, then fabricates a technical pretext (virus in Event Viewer) to create urgency before requesting credentials. Unlike purely technical attacks, social engineering exploits human psychology and trust rather than software vulnerabilities.

Phishing specifically refers to deceptive emails or websites designed to harvest credentials, not phone-based impersonation attacks.

Malware is malicious software installed on a system; no software is involved in this phone-based credential theft scenario.

A virus is a specific type of self-replicating malicious code; the attacker is fabricating a virus threat as a pretext, not actually deploying one.