Question

sunitha recently was a victim of a phishing attack. which of the following scenarios describes what might have happened to her?
a. she received a call from an attacker who pretended to be from a legitimate research firm that asked for personal information.
b. she responded to an email message that prompted her to reveal personal and financial information.
c. an attacker found her discarded credit card statement in the trash and used it to gather her personal information.
d. on an online social media site, she responded to a query and revealed personal information that enabled the attacker to guess her passwords.

Explanation:

Phishing attacks typically involve tricking users via fraudulent emails (or other electronic communications) to disclose personal/financial info. Option a is vishing (phone - based), c is dumpster diving (physical info theft), d is social engineering but not phishing. Option b matches phishing's email - based deception to get info.

Answer:

b. She responded to an email message that prompted her to reveal personal and financial information.