Which technique involves creating pages that imitate a bank to steal credentials?

• A. Spear-phishing Sites
• B. Compromised Legitimate Websites
• C. Prefetch
• D. Malvertising

Answer: (A)

Targeted credential theft through fake bank pages is carried out with spear-phishing sites. Attackers craft pages that imitate legitimate banks and lure victims with targeted messages, prompting them to enter usernames and passwords. The page’s realism—the look, branding, and even a convincing URL—helps convince the user to disclose credentials, making this method effective for harvesting logins. This differs from malvertising, which revolves around malicious ads that deliver malware rather than a direct fake login page; prefetch is unrelated to credential theft; and while compromised legitimate websites can host harmful content, the technique described centers on creating a dedicated counterfeit page to steal credentials.