A penetration tester recently performed a social-engineering attack in which the tester found an employee of the target company at a local coffee shop and over time built a relationship with the employee. On the employee's birthday, the tester gave the employee an external hard drive as a gift.
Which of the following social-engineering attacks was the tester utilizing?
Correct Answer: C. Baiting
Baiting is a social engineering attack that involves luring a victim with an appealing item, such as an external hard drive, USB stick, or free software, that contains malicious software. In this scenario, the penetration tester built trust with an employee over time and then gave them an external hard drive as a birthday gift, which is a classic example of a baiting attack.
Why is this Baiting?
Why the Other Options Are Incorrect:
Phishing
Tailgating
Tailgating is a physical security attack where an unauthorized person follows an authorized employee into a restricted area.
Shoulder Surfing
Shoulder surfing occurs when an attacker observes a victim entering credentials or sensitive information (e.g., PINs, passwords, or data) over their shoulder.
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams