A user has unknowingly gone to a fraudulent site. The security analyst notices the following system change on the user's host: Old hosts' file: 127.0.0.1 localhost New hosts' file: 127.0.0.1…

The correct answer is B. Pharming. Pharming is an attack that redirects users to fraudulent websites by corrupting DNS resolution. One common pharming technique is modifying the local hosts file to map legitimate domain names to malicious IP addresses. When the user types a trusted URL, the tampered hosts file…

Threats, vulnerabilities, and mitigations

Question

A user has unknowingly gone to a fraudulent site. The security analyst notices the following system change on the user's host:

Old `hosts' file:

127.0.0.1 localhost New `hosts' file:

127.0.0.1 localhost Which of the following attacks has taken place?

Options

ASpear phishing
BPharming
CPhishing
DVishing

How the community answered

(38 responses)

A
8% (3)
B
87% (33)
C
3% (1)
D
3% (1)

Explanation

Pharming is an attack that redirects users to fraudulent websites by corrupting DNS resolution. One common pharming technique is modifying the local hosts file to map legitimate domain names to malicious IP addresses. When the user types a trusted URL, the tampered hosts file silently redirects them to the attacker's server. The modified hosts file shown is the telltale sign of pharming. Phishing uses deceptive emails or messages to trick users into clicking malicious links. Spear phishing is a targeted version of phishing. Vishing is phishing conducted over voice calls. None of these involve hosts file manipulation.

Topics

#pharming#hosts file manipulation#DNS poisoning#social engineering

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice