An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email in hopes the Chief Executive Officer (CEO) logs in to obtain the CEO's login credentials. Which of…

The correct answer is C. Spear phishing attack. The Social Engineer Toolkit (SET) provides a framework for automating the social engineering process, including sending spear phishing messages, hosting fake websites, and collecting credentials. Social engineering plays an important role in many attacks. SET is a menu-driven…

Attacks and Exploits

Question

An attacker uses SET to make a copy of a company's cloud-hosted web mail portal and sends an email in hopes the Chief Executive Officer (CEO) logs in to obtain the CEO's login credentials. Which of the following types of attacks is this an example of?

Options

AElicitation attack
BImpersonation attack
CSpear phishing attack
DDrive-by download attack

How the community answered

(27 responses)

B
4% (1)
C
93% (25)
D
4% (1)

Explanation

The Social Engineer Toolkit (SET) provides a framework for automating the social engineering process, including sending spear phishing messages, hosting fake websites, and collecting credentials. Social engineering plays an important role in many attacks. SET is a menu-driven social engineering attack system. In this scenario, the penetration tester is attempting a spear phishing attack.

Topics

#Phishing#Spear Phishing#Social Engineering#Credential Theft

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice