Study. uk . com
  1. Home
  2. All questions
  3. Question 435

CompTIA Security+ study material · question 435 of 611

A finance clerk receives a convincing instruction to change a supplier's bank details and complies. No malware was involved. What is this attack called?

  1. Watering hole
  2. Business email compromise
  3. Credential stuffing
  4. Typosquatting
Show the answer

Answer: B. Business email compromise

It attacks the payment process rather than the technology, which is why technical controls alone do not stop it.

Challenge yourself on this topic → Study as cards