Chapter 9 – Identifying Threats, Attacks, and Vulnerabilities

1. Because you have parted with money, this is a subtle form of ransomware.
2. A fileless virus piggybacks itself onto a legitimate application, and they both launch together. Using Malwarebytes would alert you of both launching at the same time.
3. Credential harvesting is done by a phishing attack where you are warned that an account has been hacked, and it gives you a link to a website to resolve it. That way, when you try to log in, they collect your details.
4. Pretexting is where an attacker manufactures a scenario, such as saying that there is suspicious activity on your account, and they ask you to confirm your account details. This way, they can steal them.
5. An attacker obtains the details of a legitimate invoice and substitutes the bank details with their own.
6. An attacker works out what standard naming convention a company is using, and they then obtain the names of employees from the internet...