Which activities could be considered a potential spear phishing scam? (Select Three.)

Question

Options

• AAn employee receives a phone call requesting that money be sent to assist someone in trouble.
• BA courier delivers a duplicate invoice to a business that contains updated payment details of an
• CPayroll receives an external email from an employee looking to update their bank account
• DA business sends its employees an email warning that email passwords must be changed to
• EAn employee receives an email that asks to download an attachment, but the attachment is a
• FMembers of a religious organization receive a donation request by email claiming to be from their

• A
  18% (6)
• B
  74% (25)
• D
  6% (2)
• F
  3% (1)

Explanation

The activities that could be considered a potential spear phishing scam are: A courier delivers a duplicate invoice to a business that contains updated payment details of an existing supplier. This could be a way of diverting funds to a fraudulent account by impersonating a legitimate vendor and exploiting the trust relationship between the business and the supplier. Payroll receives an external email from an employee looking to update their bank account information. This could be a way of stealing money from the employee or the employer by pretending to be the employee and requesting a change in the payment method or destination. An employee receives an email that asks to download an attachment, but the attachment is a malware. This could be a way of infecting the employee's computer or network with malicious software that could compromise sensitive data, disrupt operations, or demand ransom. The other options are not necessarily spear phishing scams, although they may be other types of fraud or

No community discussion yet for this question.