Certified Incident Handler (CIH) Practice Ecam

Which term describes the tactic of misleading users into clicking harmful links by disguising them?

1. Phishing

2. Social Engineering

3. Clickjacking

4. Malvertising

The correct answer is: Clickjacking

The tactic described in the question is best characterized by clickjacking. Clickjacking involves deceiving a user into clicking on something different from what the user perceives, effectively causing unintended actions. This is typically achieved by overlaying a seemingly innocuous interface element (like a button) with a hidden, harmful link. The user thinks they are interacting with a legitimate interface, but their click is actually executed on the malicious link or action beneath it. This method is particularly effective because it exploits the trust users have in legitimate interfaces. In contrast, phishing refers to the broader practice of tricking users into providing sensitive information by pretending to be a trustworthy entity, often through emails or fake websites. Social engineering encompasses various tactics used to manipulate individuals into divulging confidential or personal information. Malvertising involves inserting malicious ads into legitimate online advertising networks; while it can lead to harmful clicks, it doesn't specifically involve disguising links in the same manner that clickjacking does. Overall, the defining aspect of clickjacking, which makes it the correct answer, is its focus on misleading the user into clicking on harmful links by cleverly disguising them.