Certified Incident Handler (CIH) Practice Ecam

Which mobile-based threat refers specifically to an SMS-based attack?

1. Phishing

2. Baseband attack

3. SMiShing

4. Spyware

The correct answer is: SMiShing

The correct choice is C, which refers specifically to an SMS-based attack known as SMiShing. SMiShing is a combination of SMS (Short Message Service) and phishing, where attackers use text messages to lure victims into providing sensitive information, such as passwords, credit card details, or personal identification numbers. The threat is particularly insidious because users may trust SMS messages more than emails, leading them to click on links or provide information without due caution. In contrast, while phishing generally involves attempting to acquire sensitive information through deceptive emails or websites, it does not specifically pertain to SMS. Baseband attacks target the baseband processor of mobile devices, often exploiting vulnerabilities in cellular communication protocols rather than directly engaging users through text messages. Spyware refers to malicious software designed to monitor and gather user information without their consent but does not specifically describe an attack method like SMiShing does. Understanding the unique characteristics of SMiShing highlights the necessity for users to remain vigilant not only about emails but also about unsolicited text messages.