Reference Guide

Angler Phishing – Category of a phishing attack. Attacks by spoofing customer service accounts on social media or through a company.

Baiting (physical) – Leaving physical media with malicious software available in a public place.

Baiting (online) – Enticing a victim to click a link through the promise of a reward.

Business Email Compromise – Category of a phishing attack. Attacks come in the form of emails masquerading as members of an organization or company.

Clickjacking – Misdirecting a victim into thinking they are clicking an appropriate link.

Diversion Theft – Altering or stealing the delivery destination of a shipment of goods.

Eavesdropping – An attack where a perpetrator gets information by listening.

Honeypot – A social engineering attack that plays off a victim’s romantic interest.

Malicious Insider (Man on the Inside) – An attack carried by someone on the inside of an organization or company.

Phishing – Sending messages with fake information, with the intent to steal the receiver’s sensitive information.

Piggybacking – Entering a restricted area by blending in with nearby authorized personnel.

Pretexting – Using a scenario to pressure a victim into performing a compromising action.

Scareware – Scaring the victim into thinking there is something wrong with their device.

Shoulder Surfing – An attack where a perpetrator gets information by looking at someone else's device screen.

Spear Phishing – Category of a phishing attack. Email or communication that targets an individual or organization.

Smishing – Category of a phishing attack. Phishing through the medium of SMS (text) messages.

Social Engineering Attack – Manipulating unsuspecting people using deception to convince them to reveal information or perform actions.

Tailgating – Entering a restricted area by closely following authorized personnel without being noticed.

Typosquatting / URL Hijacking – A malicious website set up by an attacker with a URL name matching closely to a legitimate website.

Quid Pro Quo – A false service provider promises to fix technical issues to gain access to devices.

Vishing – Category of a phishing attack. Phishing through the medium of voicemail.

Whaling – Category of a phishing attack. Targeting executives to take advantage of their executive powers for ransom.