An attacker performs reconnaissance and discovers that the target o…

Question

An attacker performs reconnaissance and discovers that the target organization uses a BGP autonomous system number and announces specific IP prefixes to the internet. How could a threat actor attempt to exploit this information?

Accepted Answer

By BGP hijacking — announcing more specific routes for the organization's IP prefixes from an attacker-controlled ASN to redirect internet traffic through attacker infrastructure — Here's the deal — b is correct because BGP is a trust-based protocol; a malicious ASN can announce more specific routes (longer prefix) for the victim's IP space, causing internet routers to prefer the attacker's route and redirect traffic (email, web requests) through attacker-controlled infrastructure for interception or blackholing. A is wrong because MAC spoofing is a LAN attack and has no effect on internet-scale routing.

Answer

By spoofing the organization's MAC addresses to redirect LAN traffic

Answer

By ARP flooding the organization's core routers to cause memory exhaustion

Answer

By performing ICMP redirect attacks to modify the organization's internal routing tables

An attacker performs reconnaissance and discovers that the target organization uses a BGP autonomous system number and announces specific IP prefixes to the internet. How could a threat actor attempt to exploit this information?

Short Explanation and Infographic

Full Explanation