Smishing is a type of social engineering technique that uses text messages (SMS) to trick victims into revealing sensitive information, clicking malicious links, or downloading malware. Smishing messages often appear to come from legitimate sources, such as banks, government agencies, or service providers, and use urgent or threatening language to persuade the recipients to take action12. In this scenario, the text message that claims to be from the payroll department is an example of smishing.
Impersonation is a type of social engineering technique that involves pretending to be someone else, such as an authority figure, a trusted person, or a colleague, to gain the trust or cooperation of the target. Impersonation can be done through various channels, such as phone calls, emails, text messages, or in- person visits, and can be used to obtain information, access, or money from the victim34. In this scenario, the text message that pretends to be from the payroll department is an example of impersonation.
A: Typosquatting is a type of cyberattack that involves registering domain names that are similar to popular or well-known websites, but with intentional spelling errors or different extensions. Typosquatting aims to exploit the common mistakes that users make when typing web addresses, and redirect them to malicious or fraudulent sites that may steal their information, install malware, or display ads56. Typosquatting is not related to text messages or credential verification.
B: Phishing is a type of social engineering technique that uses fraudulent emails to trick recipients into revealing sensitive information, clicking malicious links, or downloading malware. Phishing emails often mimic the appearance and tone of legitimate organizations, such as banks, retailers, or service providers, and use deceptive or urgent language to persuade the recipients to take action78. Phishing is not related to text messages or credential verification.
D: Vishing is a type of social engineering technique that uses voice calls to trick victims into revealing sensitive information, such as passwords, credit card numbers, or bank account details. Vishing calls often appear to come from legitimate sources, such as law enforcement, government agencies, or technical support, and use scare tactics or false promises to persuade the recipients to comply9 . Vishing is not related to text messages or credential verification.
E: 誤情報は、虚偽または誤解を招く情報を広めて、対象の信念、意見、または行動に影響を与えるソーシャル エンジニアリング手法の一種です。誤情報は、世論を操作したり、混乱を引き起こしたり、評判を傷つけたり、議題を推進したりするために使用される可能性があります。誤情報は、テキスト メッセージや資格情報の検証とは関係ありません。
参考資料 = 1: スミッシングとは? | 定義と例 | Kaspersky 2: スミッシング - Wikipedia 3:
なりすまし攻撃とは何か、そしてそれに対してどのように防御するか? 4: なりすまし - Wikipedia 5: タイポスクワッティングとは? | 定義と例 | Kaspersky 6: タイポスクワッティング - Wikipedia 7: フィッシングとは? | 定義と例 | Kaspersky 8: フィッシング - Wikipedia 9: ヴィッシングとは? | 定義と例 | Kaspersky : ヴィッシング - Wikipedia : 誤情報とは? | 定義と例 | Britannica : 誤情報 - Wikipedia