Digital Forensic Certification Practice Exam

What cybercrime was committed by James when he failed to identify a fake email and downloaded malicious software?

1. SQL injection attack

2. Phishing attack

3. Privilege escalation attack

4. Brute-force attack

The correct answer is: Phishing attack

The scenario describes a situation where an individual, James, fails to recognize a deceptive email and consequently downloads malicious software. This aligns with the concept of phishing, which involves tricking individuals into providing sensitive information or downloading harmful software by masquerading as a trustworthy entity. Phishing attacks often employ tactics such as fake emails or malicious links to exploit human vulnerabilities, prompting the victim to take an action that compromises their security. In this case, the act of downloading malicious software from a fake email directly illustrates the classic phishing technique of deception, making it evident that James fell victim to such an attack. Recognizing the characteristics associated with phishing is critical for understanding how cybercriminals can exploit individuals through social engineering tactics instead of relying solely on technical vulnerabilities.