nerdexam
CompTIA

PT0-001 · Question #254

A senior employee received a suspicious email from another executive requesting an urgent wire transfer. Which of the following types of attacks is likely occurring?

The correct answer is A. Spear phishing. A targeted email impersonating an executive to request a wire transfer from a specific employee is classified as spear phishing because the attack is crafted against a known individual using organizational context.

Attacks and exploits

Question

A senior employee received a suspicious email from another executive requesting an urgent wire transfer. Which of the following types of attacks is likely occurring?

Options

  • ASpear phishing
  • BBusiness email compromise
  • CVishing
  • DWhaling

How the community answered

(53 responses)
  • A
    89% (47)
  • B
    6% (3)
  • C
    4% (2)
  • D
    2% (1)

Why each option

A targeted email impersonating an executive to request a wire transfer from a specific employee is classified as spear phishing because the attack is crafted against a known individual using organizational context.

ASpear phishingCorrect

Spear phishing is a targeted phishing attack directed at a specific individual using personalized or organizational details to appear credible. The attacker specifically selected this senior employee and crafted the email to reference a known executive, making it far more convincing than a generic phishing attempt. This specificity - targeting one person with tailored content - is the defining characteristic of spear phishing.

BBusiness email compromise

Business email compromise refers to attacks where a legitimate business email account is actually hijacked or spoofed as part of a broader financial fraud scheme, which is a more narrowly defined crime category rather than a phishing technique classification.

CVishing

Vishing uses voice calls or voicemail as the attack medium, not email, so it does not apply to this scenario.

DWhaling

Whaling specifically designates attacks where the victim is a high-profile C-suite executive such as a CEO or CFO - the question identifies a 'senior employee' as the target, which does not necessarily meet the C-level threshold that defines whaling.

Concept tested: Social engineering phishing attack type classification

Source: https://www.cisa.gov/topics/cyber-threats-and-advisories/types-of-phishing

Topics

#spear phishing#social engineering#whaling#BEC

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice