Which technique involves impersonating financial institutions to trick users into submitting credentials?

Which technique involves impersonating financial institutions to trick users into submitting credentials?

• A. Spear-phishing Sites
• B. Social Engineered Click-jacking
• C. Compromised Legitimate Websites
• D. Thumbs.db

Answer: (A)

Impersonation of a financial institution to harvest credentials is a classic phishing tactic, targeted to trick a specific person into revealing login details. This is done by creating a page that looks exactly like a bank’s site and sending a message that appears legitimate, urging the user to enter their username and password. The key is trust—the page mirrors the real bank’s branding, and the communication often appears urgent or personalized, prompting the user to act without scrutiny. The approach is a form of social engineering aimed at credential theft, and it’s typically delivered via tailored emails or messages that point victims to a fake banking site. Other techniques in the list don’t center on pretending to be a bank to collect credentials: one focuses on tricking users into hidden actions (click-jacking), another involves hosting fraudulent content on a compromised site, and the last is a harmless system file with no connection to credential theft.

Impersonation of a financial institution to harvest credentials is a classic phishing tactic, targeted to trick a specific person into revealing login details. This is done by creating a page that looks exactly like a bank’s site and sending a message that appears legitimate, urging the user to enter their username and password. The key is trust—the page mirrors the real bank’s branding, and the communication often appears urgent or personalized, prompting the user to act without scrutiny.

The approach is a form of social engineering aimed at credential theft, and it’s typically delivered via tailored emails or messages that point victims to a fake banking site. Other techniques in the list don’t center on pretending to be a bank to collect credentials: one focuses on tricking users into hidden actions (click-jacking), another involves hosting fraudulent content on a compromised site, and the last is a harmless system file with no connection to credential theft.