PCCET · Question #120
Your CFO receives an email with her name that claims to be the company's bank and tells her to click the link https://chase.bankofamerica.mysite.ru. Which type of attack is this?
The correct answer is D. whaling. This highly targeted and personalized email attack, impersonating a bank and directed at a high-value executive like a CFO, is a sophisticated form of spear phishing known as whaling.
Question
Your CFO receives an email with her name that claims to be the company's bank and tells her to click the link https://chase.bankofamerica.mysite.ru. Which type of attack is this?
Options
- Aspamming
- Bphishing
- Cspear phishing
- Dwhaling
How the community answered
(39 responses)- B3% (1)
- C5% (2)
- D92% (36)
Why each option
This highly targeted and personalized email attack, impersonating a bank and directed at a high-value executive like a CFO, is a sophisticated form of spear phishing known as whaling.
Spamming involves sending mass, untargeted emails, unlike this highly personalized attack.
Phishing is a general term for deceptive emails, but this attack's specific target (CFO) and high-level impersonation make it more precise than general phishing.
Spear phishing is targeted, but whaling is a more specific term for attacks targeting C-level executives or other high-value individuals, making it the most accurate classification here due to the target's role.
Whaling is a specific type of spear phishing attack that targets high-profile individuals, such as executives (like a CFO), because they often have access to highly sensitive information or financial assets. The email's personalization, impersonation of a trusted entity (the company's bank), and attempt to trick her into clicking a malicious link are all hallmarks of a whaling attack.
Concept tested: Types of email-based attacks - whaling
Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender-for-office365/anti-phishing-policies-about?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.