あなたは侵入テスターとして、クライアント xyz の従業員のユーザー意識をテストしています。公開されている情報源から 2 人の従業員の電子メールを収集し、クライアント側のバックドアを作成して、電子メールで従業員に送信しています。サイバー キル チェーンのどの段階にいますか?
正解:C
Weaponization is the stage of the cyber kill chain that you are at in the above scenario. The cyber kill chain is a model that describes the phases of a cyberattack from the perspective of the attacker. The cyber kill chain consists of seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. Reconnaissance is the stage of the cyber kill chain that involves gathering information about the target, such as IP addresses, domain names, vulnerabilities, etc. Weaponization is the stage of the cyber kill chain that involves creating a malicious payload or tool that can exploit the target's vulnerabilities. Weaponization can include creating a client-side backdoor to send it to the employees via email. Delivery is the stage of the cyber kill chain that involves transmitting or delivering the weaponized payload or tool to the target's system or network. Exploitation is the stage of the cyber kill chain that involves executing or triggering the weaponized payload or tool on the target's system or network.