An impersonation attack in which a request for a website, typically an e-commerce site, is redirected to a similar-looking, but fake, website.

An impersonation attack in which a request for a website, typically an e-commerce site, is redirected to a similar-looking, but fake, website.

• A. Watering hole attack
• B. Pharming
• C. Business email compromise
• D. Typosquatting

Answer: (B)

Pharming is an impersonation attack where traffic intended for a legitimate website is redirected to a fraudulent site that looks the same. This can happen when DNS records are poisoned or when malware alters a device’s or router’s DNS settings, so even if you type the correct address, you end up at a clone of the site. The goal is to make users unknowingly enter sensitive information, such as login credentials or payment details, on the fake site. This fits the scenario because the request for a site, like an e-commerce page, is redirected to a similar-looking but fake site, rather than the user simply mistyping a URL or a different mechanism being used. Watering hole attacks involve compromising sites that a target group visits to deliver malware, not directly impersonating a specific site at the moment of access. Typosquatting relies on users landing on a misspelled domain they type or click, which is a different path to deception. Business email compromise targets financial responses through fraudulent emails, not website redirection.

Pharming is an impersonation attack where traffic intended for a legitimate website is redirected to a fraudulent site that looks the same. This can happen when DNS records are poisoned or when malware alters a device’s or router’s DNS settings, so even if you type the correct address, you end up at a clone of the site. The goal is to make users unknowingly enter sensitive information, such as login credentials or payment details, on the fake site.

This fits the scenario because the request for a site, like an e-commerce page, is redirected to a similar-looking but fake site, rather than the user simply mistyping a URL or a different mechanism being used. Watering hole attacks involve compromising sites that a target group visits to deliver malware, not directly impersonating a specific site at the moment of access. Typosquatting relies on users landing on a misspelled domain they type or click, which is a different path to deception. Business email compromise targets financial responses through fraudulent emails, not website redirection.