In which of the following attacks does an attacker spoof the source address in IP packets that are sent to the victim?

A standard DoS attack originates from a single source and overwhelms a target, but is not specifically defined by IP source address spoofing directed at reflectors.

DDoS uses many distributed attacking machines to flood a target but does not specifically describe the spoofed-source reflection mechanism that defines backscatter.

In a backscatter attack, the attacker spoofs the victim's IP address as the source in a large volume of packets directed at reflector hosts across the internet. Those reflectors respond legitimately to what they believe is the victim's request, causing massive unsolicited traffic to be directed at the victim. This technique obscures the true attacker origin and amplifies the volume of traffic reaching the target.

SQL injection manipulates database queries through unsanitized user input and has nothing to do with IP packet source address spoofing.