Certified Ethical Hacker (CEH v11) — Question 274

Ben purchased a new smartphone and received some updates on it through the OTA method. He received two messages: one with a PIN from the network operator and another asking him to enter the PIN received from the operator. As soon as he entered the PIN, the smartphone started functioning in an abnormal manner.
What is the type of attack performed on Ben in the above scenario?

Answer options

• A. Tap 'n ghost attack
• B. Phishing
• C. Advanced SMS phishing
• D. Bypass SSL pinning

Correct answer: C

Explanation

The correct answer is C, as this scenario describes a situation where Ben was tricked into providing a PIN through deceptive messaging, which is characteristic of advanced SMS phishing. Options A, B, and D do not accurately describe the method used to compromise the device or the nature of the attack.