Question #1
Verified Q&A
While performing online banking using a Web browser, a user receives an email that contains a link<br />
to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place.<br />
<br />
What Web browser-based security vulnerability was exploited to compromise the user?
to an interesting Web site. When the user clicks on the link, another Web browser session starts and displays a video of cats playing a piano. The next business day, the user receives what looks like an email from his bank, indicating that his bank account has been accessed from a foreign country. The email asks the user to call his bank and verify the authorization of a funds transfer that took place.<br />
<br />
What Web browser-based security vulnerability was exploited to compromise the user?
A
Clickjacking
B
Web form input validation
C
Cross-Site Request Forgery
D
Cross-Site Scripting
Correct Answer:
Cross-Site Request Forgery
Explanation:
Cross Site Request Forgery (XSRF) was committed against the poor individual. Fortunately the user's bank checked with the user prior to sending the funds.<br />
If it would be Cross Site Request Forgery than transaction shouldn't be shown from foreign country.<br />
Because CSRF sends request from current user session. It seems XSS attack where attacker stolen the cookie and made a transaction using that cookie from foreign country.
If it would be Cross Site Request Forgery than transaction shouldn't be shown from foreign country.<br />
Because CSRF sends request from current user session. It seems XSS attack where attacker stolen the cookie and made a transaction using that cookie from foreign country.
