An attacker sends emails claiming that an online account has been locked. The email provides a fake link with the goal of tricking users into…

The scenario describes a classic phishing attack. Phishing is a form of social engineering where an attacker uses fraudulent communication, typically email, to deceive a target into revealing sensitive information. The attacker impersonates a legitimate entity, creates a sense of urgency (e.g., a locked account), and provides a malicious link to a fake website designed to harvest the user's login credentials. This method relies on tricking the human user rather than exploiting a technical vulnerability in a system.

B. IP address spoofing: This is a network-level attack that involves modifying the source address in IP packet headers to impersonate another system, not sending deceptive emails to users.

C. Session hijacking: This attack involves an attacker taking over an active, authenticated user session, which occurs after a user has already logged in, not during the credential theft phase.

D. Man-in-the-middle attack: This involves an attacker intercepting and relaying communications between two parties. The described scenario lures the user to a separate, fake site, not intercepting a legitimate connection.

1. National Institute of Standards and Technology (NIST). (2021). NIST Special Publication 800-63B

Digital Identity Guidelines: Authentication and Lifecycle Management. Section 5.1.1

"Memorized Secrets". This document discusses phishing as a primary threat against password-based authentication

where an "impostor attempts to trick a claimant into divulging a memorized secret... by masquerading as a legitimate verifier."

2. OWASP Foundation. Phishing. OWASP Cheat Sheet Series. Retrieved from https://cheatsheetseries.owasp.org/cheatsheets/PhishingCheatSheet.html. The document defines phishing as "a form of social engineering that uses email or a website to fraudulently obtain personal information."

3. Kurose

J. F.

& Ross

K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. In Chapter 8

"Security in Computer Networks

" the authors describe phishing as attacks where "perpetrators send millions of spam e-mails that appear to be from a reputable financial institution... The e-mail directs the recipient to a bogus Web site." This directly matches the scenario.

4. Cisco. (n.d.). What Is Phishing?. Cisco.com. Retrieved from https://www.cisco.com/c/en/us/products/security/email-security/what-is-phishing.html. The article states

"Phishing is a type of social engineering attack often used to steal user data

including login credentials... It occurs when an attacker

masquerading as a trusted entity

dupes a victim into opening an email."