A fraud technique that lures people to fake websites through emails, text messages and the like posing as real companies or organizations, and gets them to enter IDs, passwords, credit card numbers and so on, which are then stolen.
Japanese name: フィッシング
Phishing appears in 3 practice questions across 1 topic, including Information Security Basics.
Field: Information Security Basics
Answer: C. Emails or text messages posing as real companies lure users to fake websites to enter and steal IDs, passwords, card numbers and so on. Access sites from bookmarks or official apps rather than from links in messages
Phishing uses emails or text messages (attacks via SMS are also called smishing) posing as financial institutions, online shops, delivery companies, government agencies and others to lure users to fake websites that look just like the real ones, where they are tricked into entering IDs and passwords, credit card numbers, one-time passwords and so on, which are then stolen. The URLs of fake sites often use domain names very similar to the real ones, making them hard to tell apart by appearance alone. On the user's side, effective measures include not entering important information through links in emails or text messages, opening sites from bookmarks or official apps, and enabling multi-factor authentication. On the service side, sender domain authentication (SPF, DKIM and DMARC) makes it harder for emails impersonating the company to be delivered.
Phishing uses emails or text messages (attacks via SMS are also called smishing) posing as financial institutions, online shops, delivery companies, government agencies and others to lure users to fake websites that look just like the real ones, where they are tricked into entering IDs and passwords, credit card numbers, one-time passwords and so on, which are then stolen.
Which combination correctly gives the phishing technique an…Stacking factors of the same kind means they can be stolen together by the same method, such as tricking the user through phishing.
Which of the following authentication methods is multi-fact…Phishing is also a kind of social engineering, since it deceives people.
Which of the following is an example of social engineering?As an Amazon Associate I earn from qualifying purchases.
Multi-factor authentication Social engineering SQL injection Cross-site scripting (XSS) Digital signature Hash function Message authentication code Principle of least privilege Public-key cryptography Ransomware