Question
A penetration tester is conducting reconnaissance for an upcoming assessment of a large corporate client. The client authorized spear phishing in the rules of engagement. Which of the following should the tester do first when developing the phishing campaign?
- A. Shoulder surfing
- B. Recon-ng
- C. Social media Correct
- D. Password dumps
Explanation
Spear phishing targets specific people, so the first step is to identify them and learn about their roles, relationships and interests, and social media is the richest passive source for that. Shoulder surfing requires physical presence and does not identify targets, password dumps are used for credential attacks rather than building the lure, and Recon-ng is a framework that automates gathering once the targets and sources are known.
