City employees receive text messages pretending to be the municipal MFA reset help line and asking for one-time codes. Which attack type is this?
Select an answer to reveal the explanation.
Short Explanation
Smishing is phishing's text-message cousin—same con, smaller screen. If the fake MFA help desk shows up as an SMS asking for codes, name the vector smishing, not SQL injection.
Full Explanation
Smishing is social engineering conducted via SMS or similar text messaging channels, often impersonating trusted services to harvest credentials or MFA codes. The scenario's text-based MFA reset lure matches smishing. Whaling via postal mail, SQL injection, and credential stuffing describe different vectors or techniques.