Question 1

True or false: Phishing attacks cannot succeed if the victim is using an encrypted public Wi-Fi network.

Accepted Answer

False. Encryption on public Wi-Fi secures data in transit but does not stop users from voluntarily entering credentials on fake pages, which is how phishing works.

Question 2

True or false: Spear phishing targets specific individuals using personalized information gathered from social media.

Accepted Answer

True. Unlike mass phishing, spear phishing customizes messages with details like job titles or hobbies, making them highly convincing.

Question 3

True or false: Phishing attacks can only occur through email, not via text messages or phone calls.

Accepted Answer

False. Smishing (SMS) and vishing (voice calls) are common phishing variants; attackers use multiple channels to trick victims.

Question 4

True or false: Phishing attacks never target employees of large corporations because they have strong security teams.

Accepted Answer

False. Large companies are prime targets; attackers know they have more data and often rely on human error despite robust defenses.

Question 5

True or false: Phishing kits often include pre-built websites that automatically harvest credentials from victims.

Accepted Answer

True. These kits are sold on dark web forums and can clone banking or login pages, collecting data instantly upon entry.

Question 6

True or false: Some phishing attacks use QR codes to redirect victims to malicious websites without clicking a link.

Accepted Answer

True. Quishing (QR phishing) tricks users into scanning codes that lead to fake login pages, bypassing email link scanners.

Question 7

True or false: The term 'phishing' originated as a variation of the word 'fishing', referring to the use of bait to catch victims.

Accepted Answer

True. Coined in the 1990s, "phishing" mimics "fishing" because attackers use deceptive emails as bait to hook sensitive information like passwords.

Question 8

True or false: Two-factor authentication can be bypassed by real-time phishing proxy attacks.

Accepted Answer

True. Attackers use reverse proxy tools like Evilginx to capture credentials and session cookies in real time, bypassing 2FA.

Phishing attack Trivia Questions