In a false survey website designed to harvest credentials, what information will you be able to gather?

In a false survey website designed to harvest credentials, what information will you be able to gather?

• A. The IP address of the employees computers
• B. Bank account numbers and the corresponding routing numbers
• C. The employees network usernames and passwords
• D. The MAC address of the employees computers

Answer: (C)

A false survey page built to harvest credentials is crafted to collect the most sensitive data users enter when asked to log in. People end up typing their network username and password into the fake form, and those credentials are sent to the attacker. That’s the core objective of credential harvesting: capture login information that can unlock corporate systems or sensitive accounts. Other data like bank account numbers or routing numbers aren’t typically requested on a standard corporate credential phish, and the MAC address of a remote computer isn’t accessible to a webpage due to privacy protections. The page may log an IP address via server logs, but the real payoff for this kind of attack is the usernames and passwords employees enter.

A false survey page built to harvest credentials is crafted to collect the most sensitive data users enter when asked to log in. People end up typing their network username and password into the fake form, and those credentials are sent to the attacker. That’s the core objective of credential harvesting: capture login information that can unlock corporate systems or sensitive accounts.

Other data like bank account numbers or routing numbers aren’t typically requested on a standard corporate credential phish, and the MAC address of a remote computer isn’t accessible to a webpage due to privacy protections. The page may log an IP address via server logs, but the real payoff for this kind of attack is the usernames and passwords employees enter.