CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Security
Employees of a Pune logistics firm receive an email that appears to come from the company's CEO, with a link to a page that imitates the corporate login screen and asks them to re-enter their passwords. Which cyber attack is being attempted?
The attack is phishing. A deceptive email posing as the CEO leads users to a cloned login page to capture their passwords. This is social engineering aimed at stealing credentials, unlike denial-of-service, which only disrupts availability, or SQL injection, which targets databases.
- APhishingCorrect
- BDenial-of-service attack
- CSQL injection
- DMan-in-the-middle attack on a Wi-Fi network
Explanation
Phishing uses deceptive messages and fake websites that impersonate a trusted party to trick users into revealing credentials. Here the fake CEO email and cloned login page are the typical features. A denial-of-service attack aims to make services unavailable rather than to steal passwords, so it does not fit.
Did you get it right without looking?
One question tells you little. A timed set on Cyber Security shows your real accuracy, how long you take and where you lose marks.
More Cyber Security questions
- During an internal investigation at an Indian company, the IT team must copy the hard disk of a suspect employee's laptop for later analysis…
- A company's security team states that a former employee's login still worked three months after resignation and was used to download client …
- A Mumbai company's employee finds her files unreadable and a message demanding payment in cryptocurrency for a decryption key. Investigation…
- An attacker enters the string ' OR '1'='1 into the login field of a company's web portal and gains access without a valid password, because …
- Under the CERT-In Directions of 2022, for how long must logs of all ICT systems be maintained securely, within the Indian jurisdiction?
- A company detects ransomware encrypting files on one finance-department server connected to the corporate network. The incident team must ac…