Which step of the cyber-attack lifecycle is a user's web browser redirected to a webpage that automatically downloads malware to the endpoint?

Question

Options

• Adelivery
• Bweaponization
• Creconnaissance
• Dcommand-and-control

• A
  89% (16)
• B
  6% (1)
• C
  6% (1)

Explanation

Delivery (A) is correct because this step describes how the attacker transmits a malicious payload to the target - a drive-by download via browser redirect is a classic delivery vector, moving the malware from the attacker's infrastructure onto the victim's endpoint.

Weaponization (B) is wrong because that step happens before delivery - it's when the attacker packages the exploit (e.g., embedding malware into a PDF or crafting the malicious webpage itself), not when it reaches the victim.

Reconnaissance (C) is wrong because that's the earliest phase, focused on passively or actively gathering information about the target, with no malware transfer involved yet.

Command-and-Control (D) is wrong because C2 occurs after the malware is already installed - the compromised endpoint then calls back to the attacker's server to receive instructions.

Memory tip: Think of Delivery as the moment of contact - the attacker "delivers a package" to your door. Weaponization built the package, Reconnaissance found your address, and C2 is the phone call after you've already opened it.

No community discussion yet for this question.