312-50V9 · Question #606
You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software. Dear valued…
The correct answer is C. Search using the URL and Anti-Virus product name into Google and lookout for suspicious warnings. This scenario describes a phishing email delivering fake antivirus software - a social engineering attack designed to trick users into installing malware.
Question
You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software. Dear valued customers, We are pleased to announce the newest version of Antivirus 2010 for Windows which will probe you with total security against the latest spyware, malware, viruses, Trojans and other online threats. Simply visit the link below and enter your antivirus code:
Antivirus code: 5014 Thank you for choosing us, the worldwide leader Antivirus solutions. Mike Robertson PDF Reader Support Copyright Antivirus 2010 ?All rights reserved If you want to stop receiving mail, please go to:
or you may contact us at the following address: Media Internet Consultants, Edif. Neptuno, Planta Baja, Ave. Ricardo J. Alfaro, Tumba Muerto, n/a Panama How will you determine if this is Real Anti-Virus or Fake Anti-Virus website?
Options
- ALook at the website design, if it looks professional then it is a Real Anti-Virus website
- BConnect to the site using SSL, if you are successful then the website is genuine
- CSearch using the URL and Anti-Virus product name into Google and lookout for suspicious warnings
- DDownload and install Anti-Virus software from this suspicious looking site, your Windows 7 will prompt
- EDownload and install Anti-Virus software from this suspicious looking site, your Windows 7 will prompt
How the community answered
(14 responses)- A14% (2)
- C79% (11)
- D7% (1)
Why each option
This scenario describes a phishing email delivering fake antivirus software - a social engineering attack designed to trick users into installing malware.
Attackers routinely copy professional-looking designs from legitimate sites, so visual appearance alone is not a reliable indicator of authenticity.
SSL/TLS only encrypts the communication channel and does not verify that the site owner is legitimate - attackers can and do obtain valid TLS certificates for phishing domains.
Searching the URL and product name in Google leverages community threat intelligence, known phishing databases, and security researcher reports to verify legitimacy without exposing yourself to the malicious site. This method is safe because it does not require any direct interaction with the suspicious link. It also surfaces warnings from antivirus vendors and security forums that have already flagged the URL or product as fraudulent.
Downloading and running software from a suspicious site risks installing malware, ransomware, or a remote access trojan regardless of any OS prompts.
This choice is identical to D and carries the same risk - executing untrusted software from a phishing site can compromise the entire system.
Concept tested: Identifying and responding to phishing attacks
Source: https://www.cisa.gov/resources-tools/resources/phishing-infographic
Topics
Community Discussion
No community discussion yet for this question.