What types of cyberattacks is an online retail company likely experiencing if customers receive emails urging them to update payment information and text messages about suspicious purchases?

• A. Phishing and smishing attacks
• B. SQL injection and DDoS attacks
• C. On-path and brute force attacks
• D. Denial of service and ransomware attacks

Answer: (A)

The scenario describes a situation where customers are receiving unsolicited emails urging them to update their payment information and text messages regarding suspicious purchases. This set of circumstances points directly to phishing and smishing attacks.

Phishing typically involves fraudulently sending emails that appear to be from reputable sources, tricking individuals into providing sensitive information, such as payment details. In this case, the emails are aimed at prompting customers to provide or confirm payment information, which is a classic hallmark of a phishing attempt.

Smishing, on the other hand, is a specific form of phishing that occurs via SMS or text messages. The messages about suspicious purchases likely serve to alarm recipients and lead them to a process where they might also divulge sensitive information or access malicious links.

Recognizing the nature of these communications and their aims is essential in cybersecurity, particularly in the context of an online retail environment where customer payment information is highly valuable.

While SQL injection and DDoS attacks are serious threats, they pertain more to direct attacks on databases or system availability rather than the manipulation of individuals through communication. Similarly, on-path attacks and brute force attempts primarily focus on intercepting data or cracking passwords, rather than manipulating customers via email or text. Denial of service attacks and ransomware