Question

You have been asked to create a spear phishing email that will entice the faculty and staff of the Trent University Forensics Department into visiting your website, which is configured to automatically install malware on their computers. 

What planning would you do prior to sending the email? 

Write the contents of the email. 

Why do you think that this would be an effective phishing attack? 

Answer 1

Answer

=======

Part a:

-------

Planning before the Phising Attack:

1. Create an fake email ID with name such as University, MyUniversity, TrentForensicsDept, etc.

2. Select an AIM or content for email, like password expiration or account information update.

3. Create a fake university login page similar to original one, with different link.

Part b:

-------

Sample Email:

Dear User,

We have noticed that your account information is missing or incorrect.

It is mandatory for the faculty and staff members to update the details on the

below link by Friday, 26th June, 5:00 PM.

Kindly visit https://...com to login and update.

Thanks,

CIS Team

2020 All Rights Reserved.

Part c:

-------

This would be an efficient technique because :

1. The sender email ID seems relevant.

2. The content of mail is relevant to eack individual.

3. The website in the provided link will have the same UI as original one.