Question 54

Evil twin

An evil twin attack primarily targets insecure networks by creating a fraudulent Wi-Fi access point that mimics a legitimate one. This allows attackers to intercept data from unsuspecting users who connect to the malicious network.

A) Evil twin

This option is correct because an evil twin attack specifically exploits insecure networks by deceiving users into connecting to a fake Wi-Fi access point. Once connected, attackers can capture sensitive information such as passwords and personal data.

B) Impersonation

Impersonation involves pretending to be someone else to gain unauthorized access to information or systems. While it can occur over any network, it does not specifically target insecure networks like an evil twin attack does.

C) Watering hole

A watering hole attack focuses on compromising a specific group of users by infecting websites they are likely to visit. This method is not directly related to insecure networks but rather to exploiting user behavior and vulnerabilities on trusted sites.

D) Pretexting

Pretexting is a form of social engineering where an attacker creates a fabricated scenario to steal personal information. Although it can occur in various contexts, it does not specifically target insecure networks in the same way an evil twin attack does.

Conclusion

The evil twin attack is definitively the correct answer as it directly targets users on insecure networks by creating a deceptive access point. Other options, while related to security breaches, do not specifically focus on exploiting the vulnerabilities of insecure networks. Thus, they fail to meet the criteria outlined in the question.