A help desk technician receives a phone call from an individual claiming to be an employee of the organization and requesting assistance to access a locked account. The help desk technician asks the individual to provide proof of identity before access can be granted. Which of the following types of attack is the caller performing?
A. Phishing
B. Shoulder surfing
C. Impersonation
D. Dumpster diving
A or C? Impersonation is defined as something done in person. Vishing is defined as phishing over the phone.
C is correct – it’s not phishing – would be vishing, but vishing is not an option here. So impersonation.