Threat Vectors and Attack Surfaces

Question 1

Threat Vector

Answer 1

Means or pathway by which an attacker can gain unauthorized access to a computer or network to deliver a malicious payload or carry out an unwanted action

Question 2

Attack Surface

Answer 2

Encompasses all the various points where an unauthorized user can try to enter data to or extract data from an environment

Question 3

Methods of minimizing attack surfaces include:

Answer 3

Restricted Access, removing unnecessary software, and disabling unused protocols

Question 4

Messages

Answer 4

Message-based threat vectors include threats delievered via email, simple message service (SMS text messaging), or other forms of instant messaging

Question 5

Images

Answer 5

Image-based threat vectors involving the embedding of malicious code inside of an image file by the threat actor

Question 6

Files

Answer 6

The files, often disguised as legitimate documents or software, can be transferred as email attachments, through file-sharing services, or hosted on a malicious website

Question 7

Voice calls

Answer 7

Vhishing - Use of voice calls to trick victims into revealing their sensitive information to an attacker

Question 8

Removable devices

Answer 8

Baiting - attackers might leave a malware-infected USB drive in a location where their target might find it, such as in the parking lot or the lobby of the targeted organization

Question 9

Unsecure Networks

Answer 9

Include wireless, wired, and bluetooth networks that lack appropriate security measures, if not properly secured, unauthorized individuals can intercept wireless communications or gain access to the network. Wired networks are more secure typically, but not immune to threats.

Question 10

Physical access to network infrastructure can lead to attacks like

Answer 10

MAC Address Cloning and VLAN Hopping

Question 11

Bluetooth attacks include examples

Answer 11

like BlueBorne, or BlueSmack exploits

Question 12

BlueBorne

Answer 12

Set of vulnerabilities in Bluetooth technology that can allow an attacker to take over devices, spread malware, or even establish an on-path attack to intercept communications without any user interaction

Question 13

BlueSmack

Answer 13

Type of Denial-of-Service attack that targets Bluetooth-enabled devices by sending a specially crafted Logical Link Control and Adaptation Protocol packet to a target device