Which technique involves sending emails that appear to be from legitimate sites to steal credentials?

Which technique involves sending emails that appear to be from legitimate sites to steal credentials?

• A. Dumpster diving
• B. TCP
• C. Phishing
• D. Metasploit

Answer: (C)

Phishing is a social engineering technique where attackers send emails that appear to come from legitimate sites in order to steal credentials. The idea is to lure you into entering usernames and passwords on a page that looks real, often by including urgent language, seemingly trustworthy branding, and links that lead to a fake login form. Once you type in your credentials, the attacker captures them for unauthorized access. This differs from dumpster diving, which is simply rummaging through discarded materials to find sensitive information, not sending deceptive emails. It’s also not about a network protocol like TCP, which governs how data packets are transferred, or a tool like Metasploit, which is used for exploiting vulnerabilities in systems rather than tricking users into revealing credentials.

Phishing is a social engineering technique where attackers send emails that appear to come from legitimate sites in order to steal credentials. The idea is to lure you into entering usernames and passwords on a page that looks real, often by including urgent language, seemingly trustworthy branding, and links that lead to a fake login form. Once you type in your credentials, the attacker captures them for unauthorized access.

This differs from dumpster diving, which is simply rummaging through discarded materials to find sensitive information, not sending deceptive emails. It’s also not about a network protocol like TCP, which governs how data packets are transferred, or a tool like Metasploit, which is used for exploiting vulnerabilities in systems rather than tricking users into revealing credentials.