During an assessment, a penetration tester gathered OSINT for one of the IT systems administrators from the target company and managed to obtain valuable information, including corporate email…

The correct answer is D. Spear phishing. Spear phishing is a type of targeted attack where the attacker sends emails that appear to come from a legitimate source, often a company or someone familiar to the target, with the goal of tricking the target into clicking on a malicious link or providing sensitive…

Attacks and Exploits

Question

During an assessment, a penetration tester gathered OSINT for one of the IT systems administrators from the target company and managed to obtain valuable information, including corporate email addresses. Which of the following techniques should the penetration tester perform NEXT?

Options

ABadge cloning
BWatering-hole attack
CImpersonation
DSpear phishing

How the community answered

(23 responses)

A
4% (1)
B
9% (2)
C
4% (1)
D
83% (19)

Explanation

Spear phishing is a type of targeted attack where the attacker sends emails that appear to come from a legitimate source, often a company or someone familiar to the target, with the goal of tricking the target into clicking on a malicious link or providing sensitive information. In this case, the penetration tester has already gathered OSINT on the IT system administrator, so they can use this information to craft a highly targeted spear phishing attack to try and gain access to the

Topics

#OSINT#Spear Phishing#Social Engineering#Targeted Attack

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice