Which stage of the cyber attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?
Which stage of the cyber attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?
The stage of the cyber attack lifecycle that makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites is the delivery stage. This is because during the delivery stage, attackers often use deceptive tactics to trick users into opening malicious links or emails. Educating users helps to prevent them from falling victim to these attacks.
The answer is B, not A. In reconnaissance, you educate users what inside info they shouldn't post: "sensitive documents, customer lists, event attendees, job roles and responsibilities (i.e., using specific security tools within an organization), etc." Delivery: "Provide ongoing education to users on spear phishing links, unknown emails, risky websites, etc."
Weaponization and Delivery: Attackers will then determine which methods to use in order to deliver malicious payloads. Some of the methods they might utilize are automated tools, such as exploit kits, spear phishing attacks with malicious links, or attachments and malvertizing. Gain full visibility into all traffic, including SSL, and block high-risk applications. Extend those protections to remote and mobile devices. Protect against perimeter breaches by blocking malicious or risky websites through URL filtering. Block known exploits, malware and inbound command-and-control communications using multiple threat prevention disciplines, including IPS, anti-malware, anti-CnC, DNS monitoring and sinkholing, and file and content blocking. Detect unknown malware and automatically deliver protections globally to thwart new attacks. Provide ongoing education to users on spear phishing links, unknown emails, risky websites, etc.
It's Delivery
Weaponization and Delivery
B: Delivery is when the adversary interacts with the potential victims.