Purchasing receives an automated phone call from a bank asking to input and verify credit card information. The phone number displayed on the caller ID matches the bank. Which of the following…

The correct answer is C. Vishing. Vishing (Voice Phishing) is phishing conducted over voice channels - telephone calls, VoIP, or automated interactive voice response (IVR) systems - that trick victims into disclosing sensitive information such as credit card numbers or PINs. This scenario is a textbook vishing…

Threats, vulnerabilities, and mitigations

Question

Purchasing receives an automated phone call from a bank asking to input and verify credit card information. The phone number displayed on the caller ID matches the bank. Which of the following attack types is this?

Options

AHoax
BPhishing
CVishing
DWhaling

How the community answered

(40 responses)

A
3% (1)
B
5% (2)
C
90% (36)
D
3% (1)

Explanation

Vishing (Voice Phishing) is phishing conducted over voice channels - telephone calls, VoIP, or automated interactive voice response (IVR) systems - that trick victims into disclosing sensitive information such as credit card numbers or PINs. This scenario is a textbook vishing attack: an automated call (IVR-style) with a spoofed caller ID impersonating a legitimate bank, prompting the victim to enter financial data. Standard Phishing (Option B) occurs via email, not voice. A Hoax (Option A) is a false alarm or prank, not a credential-harvesting scheme. Whaling (Option D) specifically targets senior executives via email or other means.

Topics

#vishing#voice phishing#social engineering#phone-based attack

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice