Question
An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)
- A. Typosquatting
- B. Phishing
- C. Impersonation Correct
- D. Vishing
- E. Smishing Correct
- F. Misinformation
Explanation
The attacker pretends to be the payroll department, which is impersonation, and delivers the lure by text message, which is smishing (SMS phishing). Smishing is the more specific term for phishing over text, so it is the better answer than generic phishing. Vishing uses voice calls, typosquatting relies on misspelled domains, and misinformation is spreading false information rather than requesting credentials.
