Ethical Hacking Essentials Practice Test

What attack is characterized by sending a malicious text message to collect sensitive information from mobile devices?

1. Phishing

2. SMiShing

3. Vishing

4. Malware injection

The correct answer is: SMiShing

The focus of this question centers around the specific type of attack that involves sending malicious text messages to target individuals and gather sensitive information from their mobile devices. SMiShing is a term specifically coined to describe SMS phishing, where cybercriminals send text messages that appear legitimate but are designed to provoke recipients into providing personal details, such as passwords or financial information. These messages often contain links to fake websites or instruct the user to reply with sensitive information, exploiting the trust associated with text communications on mobile devices. By understanding that SMiShing is a targeted approach leveraging SMS technology, it is clear why this answer accurately aligns with the characteristics described in the question. The other options represent different forms of social engineering attacks: phishing generally refers to similar tactics using email instead of text messages, vishing uses voice communication via phone calls, and malware injection pertains to compromising systems through malicious software, none of which involve the specific use of SMS to bait victims.