nerdexam
GIAC

GCIA · Question #123

Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages…

The correct answer is D. E-mail Spam. Peter is committing email spam by harvesting addresses from public sources and sending unsolicited commercial email (UCE) in bulk to those recipients.

Threat Intelligence & Network Security Monitoring

Question

Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages on these addresses. Which of the following e-mail crimes is Peter committing?

Options

  • AE-mail spoofing
  • BE-mail bombing
  • CE-mail Storm
  • DE-mail Spam

How the community answered

(52 responses)
  • A
    8% (4)
  • B
    15% (8)
  • C
    4% (2)
  • D
    73% (38)

Why each option

Peter is committing email spam by harvesting addresses from public sources and sending unsolicited commercial email (UCE) in bulk to those recipients.

AE-mail spoofing

Email spoofing involves forging the From or header fields to make an email appear to originate from a different sender, which is not described in this scenario.

BE-mail bombing

Email bombing targets a single recipient or server with an overwhelming volume of messages to cause a denial-of-service effect, not mass unsolicited commercial messaging to many harvested addresses.

CE-mail Storm

An email storm is an uncontrolled chain reaction of reply-all responses within an organization that floods inboxes, not a deliberate harvesting-and-spam campaign by an external attacker.

DE-mail SpamCorrect

Email spam is defined as the mass distribution of unsolicited commercial or bulk email to recipients who have not requested it, often sourced from harvested address lists gathered from public web pages, DNS records, newsgroups, and blogs. Peter's activity - automated harvesting followed by bulk UCE delivery - matches the textbook definition of spamming.

Concept tested: Email spam definition and harvesting techniques

Source: https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/

Topics

#email spam#social engineering#UCE#email harvesting

Community Discussion

No community discussion yet for this question.

Full GCIA Practice