GCIH · Question #712
A fake installer exploit is delivered using which attack?
The correct answer is C. Watering hole. A watering hole attack delivers malicious payloads, such as fake installers, by compromising websites that target users frequent. Victims unknowingly download the malware while browsing a trusted but compromised site.
Question
A fake installer exploit is delivered using which attack?
Options
- ACommand injection
- BSession hijacking
- CWatering hole
- DReverse shell
How the community answered
(44 responses)- A2% (1)
- B5% (2)
- C91% (40)
- D2% (1)
Why each option
A watering hole attack delivers malicious payloads, such as fake installers, by compromising websites that target users frequent. Victims unknowingly download the malware while browsing a trusted but compromised site.
Command injection exploits vulnerable input fields to execute arbitrary OS commands on a server, not to deliver fake installer packages to end users.
Session hijacking involves stealing or forging session tokens to impersonate an authenticated user, not delivering malicious software installers.
A watering hole attack involves an adversary compromising a legitimate website frequented by intended victims and planting malware - such as a fake installer - that is silently downloaded when users visit. The attack is named after predators waiting at a watering hole, and it is effective because victims trust the site they are visiting, making them less suspicious of the delivered payload.
A reverse shell is a post-exploitation technique where a compromised host connects back to an attacker's listener, not a delivery mechanism for initial malware installation.
Concept tested: Watering hole attack malware delivery method
Source: https://attack.mitre.org/techniques/T1189/
Topics
Community Discussion
No community discussion yet for this question.