means of either eliciting information from someone or getting them to perform some action for the threat actor—”hacking the human”

pretending to be someone else. One of the basic social engineering techniques

Combination of social engineering and spoofing. Persuades/tricks the targed into interacting with a malicious resource disguised as a trusted one

phishing attack conducted through a voice channel (telephone or VoIP)

phishing attack that uses simple message service (SMS) text communications as the vector

redirects users from a legitimate website to a malicious one.

threat actor registers a domain name very similar to a real one, hoping that users will not notice the difference and assume they are browsing a trusted site

Business email compromise

sophisticated campaign that targets a specific individual within a company, typically an executive or senior manager

threat actor commits resources to accurately duplicate a company’s logos and formatting to make a phishing message or pharming website, a visually compelling fake.

relies on a group of targets that use an unsecure third-party website.

Help

Options

focusNode

Didn't know it?
click below

Knew it?
click below

Don't Know

Remaining cards (0)

Know

retry

shuffle

restart

0:00

Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

Normal Size Small Size show me how

2.3

Term	Definition
Social Engineering:	means of either eliciting information from someone or getting them to perform some action for the threat actor—”hacking the human”
Impersonation	pretending to be someone else. One of the basic social engineering techniques
Phishing	Combination of social engineering and spoofing. Persuades/tricks the targed into interacting with a malicious resource disguised as a trusted one
Vishing	phishing attack conducted through a voice channel (telephone or VoIP)
SMiShing	phishing attack that uses simple message service (SMS) text communications as the vector
Pharming attack	redirects users from a legitimate website to a malicious one.
Typosquatting	threat actor registers a domain name very similar to a real one, hoping that users will not notice the difference and assume they are browsing a trusted site
Business email compromise	sophisticated campaign that targets a specific individual within a company, typically an executive or senior manager
Brand impersonation:	threat actor commits resources to accurately duplicate a company’s logos and formatting to make a phishing message or pharming website, a visually compelling fake.
Watering hole attack	relies on a group of targets that use an unsecure third-party website.

Created by: OliviaGarcia2412

"Know" box contains:
Time elapsed:
Retries: