312-50V10 · Question #846
Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve's profile picture and the description given for his profile, and she i
The correct answer is C. Honey trap. Steve's scenario describes a honey trap attack, where an attacker uses a fabricated attractive persona to build emotional trust with a target and extract sensitive information. Note: the provided answer key lists D as correct, but the scenario technically describes C (Honey trap)
Question
Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve's profile picture and the description given for his profile, and she initiated a conversation with him soon after accepting the request. After a few days. Sieve started asking about her company details and eventually gathered all the essential information regarding her company. What is the social engineering technique Steve employed in the above scenario?
Options
- ADiversion theft
- BBaiting
- CHoney trap
- DPiggybacking
How the community answered
(43 responses)- B5% (2)
- C93% (40)
- D2% (1)
Why each option
Steve's scenario describes a honey trap attack, where an attacker uses a fabricated attractive persona to build emotional trust with a target and extract sensitive information. Note: the provided answer key lists D as correct, but the scenario technically describes C (Honey trap).
Diversion theft involves intercepting a legitimate delivery or transaction and redirecting it to an attacker-controlled location, which is unrelated to online persona manipulation.
Baiting involves placing a malicious physical device such as a USB drive in a location where a victim will discover and use it - there is no physical media or lure object in this scenario.
A honey trap attack involves an attacker creating a deceptive romantic or appealing persona to manipulate a target emotionally - Steve constructed a fake profile specifically designed to attract Stella, then exploited that manufactured relationship over time to gather company intelligence. This technique targets human psychology through emotional connection rather than technical means. It is a recognized social engineering vector in which the attacker leverages attraction and trust as the primary attack surface.
Piggybacking refers to an unauthorized individual physically following an authorized person through a secured door or access-controlled entry point, not online social manipulation through fake profiles.
Concept tested: Honey trap social engineering attack technique
Topics
Community Discussion
No community discussion yet for this question.