An employee attempts to go to a well-known bank site using the company-standard web browser
by correctly typing in the address of the site into the web browser. The employee is directed to a
website that looks like the bank’s site but is not the actual bank site. The employee’s user name
and password are subsequently stolen. This is an example of which of the following?
A.
Watering hole attack
B.
Cross-site scripting
C.
DNS poisoning
D.
Man-in-the-middle attack
Explanation:
How is it different from Cross Site scripting?
I think the answer is B?
How is it different from Cross Site scripting?
I think the answer is B?
“The employee is directed to a website that looks like the bank’s site but IS NOT the actual bank site” hence C.DNS poisoning.