CompTIA Security+ SY0-601 - 1.1 Nyberg Study Guide 2023

social enginerring Sometimes referred to as hacking people. The use of deception to manipulate individuals into divulging confidential or personal information that may be used for fraudulent purposes. Phishing The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers. Smishing Phishing attacks committed using text messages (SMS). Vishing Phishing attacks committed using telephone calls or VoIP systems. Spam Unsolicited email. Spim A variation of spam, which targets instant messaging users instead of email users. Spear phishing A phishing expedition in which the emails are carefully designed to target a particular person or organization. Dumpster diving The act of digging through trash receptacles to find information that can be useful in an attack. Shoulder surfing Gaining compromising information through physical observation. Pharming Reroutes requests for legitimate websites to false websites. Tailgating When an unauthorized individual enters a restricted-access building by following an authorized user. Eliciting information Encouraging a user to reach for and share information. Whaling Phishing targeted to senior business executives and government leaders. Prepending Manipulating browser URLs by placing malicious content in front. Identity fraud Personal information is used to make purchases, withdraw cash, or set up new accounts without your approval. Invoice scams The use of fraudulent billing practices to steal from a company. Credential harvesting The use of MITM attacks, DNS poisoning, phishing, and other vectors to amass large numbers of credentials (username / password combinations) for reuse.