Free Preparation Discussions
MENU
CompTIA PT0-003 Exam - Topic 2 Question 14 Discussion
Topic #: 2
A penetration tester is conducting reconnaissance for an upcoming assessment of a large corporate client. The client authorized spear phishing in the rules of engagement. Which of the following should the tester do first when developing the phishing campaign?
When developing a phishing campaign, the tester should first use social media to gather information about the targets.
Social Media:
Purpose: Social media platforms like LinkedIn, Facebook, and Twitter provide valuable information about individuals, including their job roles, contact details, interests, and connections.
Reconnaissance: This information helps craft convincing and targeted phishing emails, increasing the likelihood of success.
Process:
Gathering Information: Collect details about the target employees, such as their names, job titles, email addresses, and any personal information that can make the phishing email more credible.
Crafting Phishing Emails: Use the gathered information to personalize phishing emails, making them appear legitimate and relevant to the recipients.
Other Options:
Shoulder Surfing: Observing someone's screen or keyboard input to gain information, not suitable for gathering broad information for a phishing campaign.
Recon-ng: A tool for automated reconnaissance, useful but more general. Social media is specifically targeted for gathering personal information.
Password Dumps: Using previously leaked passwords to find potential targets is more invasive and less relevant to the initial stage of developing a phishing campaign.
Pentest Reference:
Spear Phishing: A targeted phishing attack aimed at specific individuals, using personal information to increase the credibility of the email.
OSINT (Open Source Intelligence): Leveraging publicly available information to gather intelligence on targets, including through social media.
By starting with social media, the penetration tester can collect detailed and personalized information about the targets, which is essential for creating an effective spear phishing campaign.
Julene
6 months agoGerman
6 months agoMicheline
6 months agoBrittni
7 months agoBeula
7 months agoLashonda
7 months agoAdelle
7 months agoLeigha
7 months agoMaira
8 months agoSherell
8 months agoNan
8 months agoEura
8 months agoLou
8 months agoRebbeca
8 months agoNakisha
2 years agoNicholle
2 years agoMammie
1 year agoMaxima
1 year agoLindsey
1 year agoCeola
2 years agoRanee
1 year agoCheryl
1 year agoDella
2 years agoMargot
2 years agoCharisse
2 years agoNenita
1 year agoBronwyn
2 years agoMabelle
2 years agoHana
2 years agoMajor
2 years agoDorothy
2 years agoFannie
2 years agoLacey
2 years agoLatricia
2 years agoDenny
2 years agoLorean
2 years agoDeangelo
2 years agoDierdre
2 years agoLuis
2 years agoRochell
2 years ago