nerdexam
GIAC

GPEN · Question #328

Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages…

The correct answer is B. E-mail Spam. Collecting email addresses from public sources and sending bulk unsolicited commercial email to them is the definition of email spam.

Penetration Testing Foundations & Reconnaissance

Question

Peter, a malicious hacker, obtains e-mail addresses by harvesting them from postings, blogs, DNS listings, and Web pages. He then sends large number of unsolicited commercial e-mail (UCE) messages on these addresses. Which of the following e-mail crimes is Peter committing?

Options

  • AE-mail spoofing
  • BE-mail Spam
  • CE-mail bombing
  • DE-mail Storm

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    71% (29)
  • C
    7% (3)
  • D
    17% (7)

Why each option

Collecting email addresses from public sources and sending bulk unsolicited commercial email to them is the definition of email spam.

AE-mail spoofing

Email spoofing involves forging the sender address or message headers to impersonate another identity, which is not described in the scenario.

BE-mail SpamCorrect

Email spam (UCE - Unsolicited Commercial Email) is characterized by harvesting recipient addresses from public sources such as websites, blogs, and DNS records, then distributing bulk commercial messages to those addresses without consent. Peter's behavior - automated harvesting followed by mass UCE distribution - precisely matches this definition and is the conduct regulated under laws like the U.S. CAN-SPAM Act.

CE-mail bombing

Email bombing means flooding a single target address or mail server with an enormous volume of messages to cause denial of service, which is distinct from sending UCE to many different harvested addresses.

DE-mail Storm

An email storm is an uncontrolled cascade of automated reply-all messages that overwhelms a mail system, not a deliberate bulk commercial mailing campaign by a spammer.

Concept tested: Email spam definition and address harvesting techniques

Source: https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business

Topics

#email spam#email harvesting#OSINT#UCE

Community Discussion

No community discussion yet for this question.

Full GPEN Practice