Riya fell victim to a scam after she was requested to provide her username and password via email. Which trick did the attacker use?

Prepare for the EC-Council Certified Incident Handler Test with an interactive quiz. Study with flashcards, MCQs, hints, and explanations. Ace your test!

The attacker used a phishing technique to deceive Riya into providing her username and password via email. Phishing is a common cyber attack method where the attacker impersonates a trusted entity in electronic communications to trick individuals into divulging sensitive information, such as login credentials or financial details. By requesting Riya to reply to the email with her username and password, the attacker created a scenario where Riya believed she was communicating with a legitimate source, leading to the compromise of her personal information.

When it comes to the other techniques, sniffing involves intercepting data packets traveling over a network and does not specifically require the victim to provide credentials directly. Pharming involves redirecting users from legitimate websites to fraudulent ones, often without the users’ knowledge, which was not the case in this scenario. Keyloggers are malware designed to record individual keystrokes on a device, allowing the attacker to capture credentials without direct interaction from the user. However, in this instance, Riya provided her information willingly in response to a phishing request.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy