ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ77

VerifiedSocial Engineering Penetration Testing Methodology

James, a research scholar, received an email stating that someone was attempting to access his Google account from an unknown device. When he opened the email, it appeared to be a standard Google notification that instructed him to click the link below to take further action. The link redirected him to a malicious webpage, where he was deceived into providing his Google account credentials. James noticed that the URL began with www.translate.google.com, which made it appear legitimate.

In this scenario, identify the type of attack being carried out against James' email account.

Explanation

Phishing uses a fraudulent message that impersonates a trusted organization to lure a recipient to a malicious site and steal credentials. The email's fake Google security alert and credential-harvesting link are characteristic of phishing.

Community Discussion

No comments yet. Be the first to start the discussion!