Question

An attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money) by masquerading as a trustworthy entity in an electronic communication – is known as

• A. Salami Attacks
• B. Phishing
• C. Data diddling:
• D. Forgery

Hint:

For cybercrimes, learn the specific definitions. Phishing = masquerading to get sensitive info. Vishing = phishing via voice calls. Smishing = phishing via SMS. Data Diddling = unauthorized data alteration. Salami Slicing = stealing tiny amounts from many sources.

Answer 1

The Correct Option is B

Step 1: Understanding the Concept:
The question provides a definition of a specific type of cybercrime and asks for its name. The key elements are: acquiring sensitive information, masquerading as a trustworthy entity, and using electronic communication.
Step 2: Detailed Explanation:
The described activity is the classic definition of Phishing. Phishing attacks typically use deceptive emails, instant messages, or fake websites that are designed to look like they are from legitimate organizations (like banks, social media sites, or online payment processors) to trick users into revealing their personal and financial information. The term is a homophone of "fishing," alluding to the use of a bait to catch a victim.
- Salami Attack: A series of minor attacks that together result in a larger attack. Often used for financial fraud where tiny amounts of money are sliced off from multiple accounts.
- Data Diddling: The unauthorized alteration of data before or during its input into a computer system.
- Forgery: Creating a false document or altering a real one with the intent to defraud. While phishing involves deception, "forgery" is a broader legal term. "Phishing" is the specific term for this type of online scam.
Step 3: Final Answer:
The described cybercrime is known as Phishing.

Answer 2

This question describes a cyber offence where an attacker poses as a trustworthy source to trick someone into giving up personal or financial information. Let's go through each option and see which one matches this description.

1. Salami Attacks: This kind of fraud does not rely on impersonating anyone electronically. Instead, it involves shaving off tiny, unnoticeable amounts of money from many different accounts or transactions over time until they add up to a large sum. There is no masquerading as a trustworthy entity here, so this does not match.
2. Phishing: This is exactly the offence described. The offender sends fake emails, messages, or sets up fraudulent websites that appear to come from banks, payment platforms, or other trusted organisations. The victim is deceived into typing in usernames, passwords, or card details, which the attacker then captures and misuses. The masquerading element and the goal of harvesting sensitive credentials line up precisely with the question.
3. Data diddling: This refers to tampering with data before or while it is being entered into a computer system, for example altering figures in an input file. It is a form of data manipulation, not an act of impersonation to extract information from a victim, so it does not fit.
4. Forgery: This means creating a fake document or altering a genuine one so it can be used to deceive, such as a counterfeit signature or certificate. It concerns the falsification of documents rather than tricking someone into voluntarily handing over passwords or card numbers online.

Only phishing involves both the impersonation of a trusted entity and the specific goal of harvesting usernames, passwords, and card details through electronic communication.

Therefore, the correct answer is Phishing.