ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ34

VerifiedSocial Engineering Penetration Testing Methodology

A user unknowingly installs a fake, malicious banking app on an Android mobile device. The app contains a configuration file consisting of the bank’s phone numbers.

When the user calls the bank, the call is automatically redirected to a number used by the attacker, who impersonates a banking official.

The app also enables the attacker to call the user and display a fake caller ID on the user’s mobile device that resembles a call from a legitimate bank.

Identify the attack being carried out against the Android mobile user.

Explanation

Vishing is voice phishing conducted through telephone calls. Redirecting bank calls to an impersonator and spoofing a legitimate bank caller ID are techniques used to deceive victims during voice-based social-engineering attacks.

Community Discussion

No comments yet. Be the first to start the discussion!