During a penetration test, Madhuri obtains the uniform of a well-known package delivery service and wears it into the target office. She states to have a delivery for a C-level employee she knows is there and insists that the package must be signed for by that person. What social engineering technique has she applied?

Madhuri has impersonated an actual employee of the delivery service to gain access to the company. Company uniforms are a very useful element for in-person social engineering. Whaling is a type of phishing attack aimed at leaders in an organization. A watering hole attack deploys malware or other attack tools at a site or sites that a target group frequently uses. Prepending is vaguely defined by the Security+ exam but can mean a number of things. When you see prepending on the exam, it should normally mean “adding something to the front of the text.”