What term describes the process of gathering information about a target company to enhance the trust level of a phishing message?

What term describes the process of gathering information about a target company to enhance the trust level of a phishing message?

• A. Reconnaissance
• B. Social Engineering
• C. Phishing
• D. Malware Analysis

Answer: (A)

Reconnaissance is the process of gathering information about a target to tailor an attack and make it appear trustworthy. In the context of phishing, attackers collect details about the target company—like its structure, domains, employee roles, internal processes, and branding—to craft a message that looks legitimate and increases the chance of success. This targeted data collection, often a precursor to spear-phishing, helps the attacker build credibility and bypass initial skepticism. Social engineering is the broader tactic of manipulating people, but the step that specifically involves accumulating information about the target is reconnaissance. Phishing refers to delivering the deceptive message itself, and malware analysis isn’t about gathering target data for social engineering.

Reconnaissance is the process of gathering information about a target to tailor an attack and make it appear trustworthy. In the context of phishing, attackers collect details about the target company—like its structure, domains, employee roles, internal processes, and branding—to craft a message that looks legitimate and increases the chance of success. This targeted data collection, often a precursor to spear-phishing, helps the attacker build credibility and bypass initial skepticism. Social engineering is the broader tactic of manipulating people, but the step that specifically involves accumulating information about the target is reconnaissance. Phishing refers to delivering the deceptive message itself, and malware analysis isn’t about gathering target data for social engineering.