Which term describes the practice of sending spam through instant messaging that leads to credential theft?

• A. Instant Chat Messenger
• B. Spimming
• C. Whaling attack
• D. Spamming

Answer: (B)

The main idea here is deceptive messaging through instant messaging used to steal credentials. Spimming combines spam with instant messaging to spread quickly in channels people trust, like chat apps. Attackers often pose as a friend or coworker and push a fake login prompt or a link to a spoofed site, aiming to harvest usernames, passwords, or tokens. This makes it a form of phishing that is specifically carried out over IM platforms, taking advantage of real-time delivery and the perceived legitimacy of a familiar contact. It’s different from generic email spam and from whaling, which targets top executives; spimming is the IM-focused phishing tactic designed for credential theft. To defend, verify unexpected messages, avoid clicking suspicious links, enable multi-factor authentication, and educate users to spot impersonations and spoofed profiles.