Exam 312-50v13 topic 1 question 30 discussion

Actual exam question from ECCouncil's 312-50v13

Question #: 30
Topic #: 1

Sophia is a shopping enthusiast who spends significant time searching for trendy outfits online. Clark, an attacker, noticed her activities several times and sent a fake email containing a deceptive page link to her social media page displaying all-new and trendy outfits. In excitement, Sophia clicked on the malicious link and logged in to that page using her valid credentials.
Which of the following tools is employed by Clark to create the spoofed email?

A. Evilginx
B. Slowloris
C. PLCinject
D. PyLoris

Show Suggested Answer

Suggested Answer: A 🗳️

by Rangnarok at Jan. 15, 2025, 11:58 a.m.

Comments

Submit Cancel

e30b32d

1 month, 2 weeks ago

Selected Answer: A

Evilginx: This is a popular phishing toolkit often used for creating convincing man-in-the-middle (MitM) phishing pages. It captures not only the credentials but also the session cookies, allowing attackers to bypass two-factor authentication (2FA) in some cases. It works by setting up a reverse proxy, making the phishing page appear legitimate. Slowloris: A denial-of-service (DoS) tool that exhausts a web server's resources, not used for phishing or spoofing emails. PLCinject: Not a common tool for phishing; it is more related to industrial control system (ICS) attacks. PyLoris: Another DoS tool, similar to Slowloris, focused on consuming server connections.

upvoted 1 times

...

Rangnarok

5 months, 2 weeks ago

Selected Answer: A

Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies Slowloris is an application layer DDoS attack which uses partial HTTP requests to open connections between a single computer and a targeted Web server, then keeping those connections open for as long as possible, thus overwhelming and slowing down the target. Pyloris is a slow HTTP DoS tool

upvoted 3 times

...