Question
An employee clicked a link in an email from a payment website that asked the employee to update contact information. The employee entered the log-in information but received a “page not found” error message. Which of the following types of social engineering attacks occurred?
- A. Brand impersonation
- B. Pretexting
- C. Typosquatting
- D. Phishing Correct
Explanation
The employee received an email with a link to a fake site that collected their login credentials, then showed an error once the credentials were captured. That is phishing: a fraudulent email that tricks the recipient into revealing sensitive information. Brand impersonation and typosquatting can be techniques used inside a phishing campaign, but the question gives no detail about a look-alike domain, and pretexting relies on an invented scenario delivered through direct interaction.
