Question 1

True or false: Spear phishing targets specific individuals using personalized information gathered from social media.

Accepted Answer

True. Unlike mass phishing, spear phishing customizes messages with details like job titles or hobbies, making them highly convincing.

Question 2

True or false: Using a public Wi-Fi network makes you immune to phishing attacks because of encryption.

Accepted Answer

False. Public Wi-Fi does not prevent phishing; attackers can still send fake login pages or intercept traffic if you visit malicious sites.

Question 3

True or false: Phishing attacks can only occur through email, not via text messages or phone calls.

Accepted Answer

False. Smishing (SMS) and vishing (voice calls) are common phishing variants; attackers use multiple channels to trick victims.

Question 4

True or false: Phishing attacks never target employees of large corporations because they have strong security teams.

Accepted Answer

False. Large companies are prime targets; attackers know they have more data and often rely on human error despite robust defenses.

Question 5

True or false: Phishing kits often include pre-built websites that automatically harvest credentials from victims.

Accepted Answer

True. These kits are sold on dark web forums and can clone banking or login pages, collecting data instantly upon entry.

Question 6

True or false: Phishing emails often contain perfect grammar and spelling to look legitimate.

Accepted Answer

False. Actually, many phishing emails have typos or odd phrasing, but sophisticated attacks now use flawless language to evade detection.

Question 7

True or false: Some phishing attacks use QR codes to redirect victims to malicious websites without clicking a link.

Accepted Answer

True. Quishing (QR phishing) tricks users into scanning codes that lead to fake login pages, bypassing email link scanners.

Question 8

True or false: Two-factor authentication can still be bypassed by real-time phishing proxy attacks.

Accepted Answer

True. Attackers use reverse proxy tools like EvilGinx to capture credentials and session cookies, defeating 2FA in real time.

Phishing attack Trivia Questions