ECSA v10: EC-Council Certified Security Analyst v10

Question

A group of cybercriminals in Germany has sent malware-based emails to employees of a fast-food center that has multiple outlets distributed geographically.

When any employee clicks a malicious email, it provides backdoor access to the point-of-sale (POS) systems at various outlets. After accessing those POS systems, the criminals can obtain the fast-food center customers’ credit-card details.

In this scenario, identify the type of attack being carried out against the fast-food center.

Explanation

Phishing is a social-engineering attack that uses malicious email to trick recipients into clicking links or opening attachments, often resulting in malware infection, unauthorized access, and theft of sensitive information such as payment-card data.

Learn more

CISA Phishing General Security Postcard

ECSA v10: EC-Council Certified Security Analyst v10

AstroTutor

Notes

Readiness

QuestionQ37

Community Discussion