Certified Incident Handler (CIH) Practice Ecam

Which of the following types of email attacks was identified when unsolicited email links requested personal information from company employees?

1. Spamming

2. Phishing

3. Spimming

4. Malware

The correct answer is: Phishing

The correct answer is phishing because this type of email attack specifically involves deceptive emails that trick recipients into revealing sensitive personal information, such as passwords or banking details. Phishing attacks often contain links that, when clicked, lead victims to fraudulent websites designed to appear legitimate, with the intent of collecting sensitive data under false pretenses. In the context of the scenario provided, unsolicited emails requesting personal information from company employees clearly fit the definition of a phishing attempt, as they are aimed at misleading recipients into providing confidential information by exploiting trust and creating a sense of urgency or importance. Other options describe different types of threats or attacks. Spamming refers to the bulk sending of unsolicited messages, often for advertising purposes, rather than seeking personal information. Spimming is a more specific term related to spam that involves instant messaging and chat applications to distribute unwanted messages, which does not align with the email context. Malware encompasses various software designed to harm or exploit devices and systems, but it does not specifically relate to requesting personal information through deceptive emails. Hence, phishing is the most accurate choice in this scenario.