Learn: asdasdasPhishing Social engineering delivered via email, text, or other communication methods to trick someone into giving up private information like usernames, passwords, or personal details Vishing Voice phishing — attacker calls the victim, often spoo | Quizlet

Phishing

Social engineering delivered via email, text, or other communication methods to trick someone into giving up private information like usernames, passwords, or personal details

Vishing

Voice phishing — attacker calls the victim, often spoofing caller ID, using a false story to extract sensitive information over the phone

Smishing

SMS-based phishing — malicious links or requests sent via text message, often disguised as delivery notices, bank alerts, or similar urgent messages

Typosquatting

Registering a domain that is a near-identical misspelling of a legitimate domain to trick users into visiting a fake site (e.g., professormessor.com instead of professormesser.com)

Pretexting

Inventing a false scenario or story to manipulate a target into taking an action or revealing information

Impersonation

An attacker pretending to be someone they are not (coworker, executive, help desk, government agency) to gain trust and lower the target's guard

Elicitation

The technique of extracting sensitive information from a target indirectly, through conversation and a believable story, rather than asking for it outright

Identity fraud

Using a victim's real personal information to open accounts, take loans, or claim benefits in their name, with the attacker receiving the benefit while the victim bears the consequences

Watering hole attack

Compromising a third-party website that the target's employees are known to regularly visit, rather than attacking the target directly, so the target becomes infected when they visit that trusted site

Defense in depth

A layered security strategy using multiple overlapping controls (firewall, IPS, antivirus, etc.) so that if one layer misses a threat, another layer can catch it

Misinformation/Disinformation

The spread of factually incorrect information, often through coordinated influence campaigns using fake social media accounts, designed to divide, confuse, or mislead groups of people

Influence campaign

A coordinated effort, often on social media, to spread misinformation or disinformation around political or social issues, sometimes backed by a nation state

Brand impersonation

Creating fake websites using a well-known brand name so search engines index them, tricking users searching for the real brand into visiting a malicious look-alike site instead

Spoofing (caller ID)

Falsifying caller ID information to make a phone call appear to come from a trusted or legitimate source

Business Email Compromise (BEC)

A phishing attack where an attacker impersonates a trusted business contact or executive via email, often to request fraudulent wire transfers or sensitive data