GSLC · Question #194
In which of the following techniques does an attacker change the address of the phishing site in such a manner that it can bypass filters or other application defenses that have been put in place to…
The correct answer is D. URL obfuscation. URL obfuscation is a phishing technique where attackers disguise or alter a malicious URL to evade IP-based filters and security defenses.
Question
In which of the following techniques does an attacker change the address of the phishing site in such a manner that it can bypass filters or other application defenses that have been put in place to block specific IP addresses?
Options
- ADumpster diving
- BReverse social engineering
- CShoulder surfing
- DURL obfuscation
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- C6% (2)
- D88% (28)
Why each option
URL obfuscation is a phishing technique where attackers disguise or alter a malicious URL to evade IP-based filters and security defenses.
Dumpster diving is a physical social engineering technique involving searching through discarded materials for sensitive information, unrelated to URL manipulation.
Reverse social engineering is a technique where the attacker creates a scenario causing the victim to initiate contact and seek help from the attacker, not related to URL address modification.
Shoulder surfing is a physical observation attack where an attacker watches a target enter credentials or sensitive data, with no involvement of URLs or network filtering.
URL obfuscation involves manipulating a phishing site's address using techniques such as IP address encoding, hexadecimal or octal notation, or URL shortening to make it unrecognizable to security filters. This allows attackers to bypass blocklists that target specific IP addresses or domain patterns. It is the defining technique used to hide the true destination of phishing links from both automated defenses and end users.
Concept tested: URL obfuscation in phishing to bypass IP filters
Topics
Community Discussion
No community discussion yet for this question.