eBay is an example of an online company that has been faced with numerous security issues. For example, imagine you purchase a digital camera on eBay. Three months later you might receive an email asking you to log in to the system to update your credit card or PayPal information. Of course, this email is not actually from eBay and as soon as you log in your information will be stolen. What type of information security breach would you consider this to be?

Question

BlackTom AI · Accepted Answer

QuestionRestatement: The scenario describes receiving an email that asks you to log in to update credit card or PayPal information, directing you to enter credentials on a site that is not actually the legitimate eBay site. This is a common security awareness example.
Option 1: 'Dumpster diving' — This refers to physically searching through trash to find discarded information. The scenario does not involve rummaging through discarded materials; it involves a deceptive email designed to steal credentials, so dumpster diving is not applicable here.
Option 2: 'Social engineering' — This broad category covers using manipulation or deceit to obtain confidential information, often by exploiting trust. While the email itself could be considered social engineering, the more specific and commonly used term for an email that tricks users into revealing credentials is phishing. So this is partly relevant but not the most precise label for this specific action.
Option 3: 'An Insider' — An insider breach involves someone with legitimate access within an organization misusing their privileges. The described attack originates from outside the organization via a fraudulent email, not from an internal actor, making this option inaccurate.
Option 4: 'Phishing' — This option describes the exact scenario: receiving a deceptive email purporting to be from a legitimate company (eBay) that prompts you to log in to a site to steal your credentials. This aligns with the classic definition of phishing, where attackers impersonate trusted brands to lure victims into revealing sensitive information.
In summary, the scenario centers on a deceitful email aimed at eliciting login details by masquerading as eBay, which is a textbook phishing attack. The other options fail to capture the specific mechanism at play, either by referring to unrelated methods (dumpster diving, insider) or by being too broad (social engineering) without pinpointing the phishing vector.

查看解析

登录即可查看完整答案

类似问题

Which of the following is a common Internet scam in which an email is sent from someone posing as your bank or other legitimate business asking for personal information?

Part 1If you receive an email asking for your social security number in return for a million dollars, this is an example of ____________. Part 1 A. phishing B. evil twins C. IP spoofing D. war driving E. pharming

________ is a type of identity theft that uses deceptive emails and fraudulent web and online mobile sites to fool users into divulging personal data.

The practice of using fake business emails in order to trick users into divulging personal data, such as usernames and passwords, is called:

更多留学生实用工具

考试浏览器助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单