Non-fraudulent vs. Fraudulent Threats ( GROUP 6 )

What is the primary origin of non-fraudulent threats?

• Phishing attempts via SMS

• Malware-laden applications

• Deliberate attacks for financial gain

• Mistakes or technical shortcomings

Which of the following is an example of a fraudulent threat in IoT?

• Using factory default passwords because the user didn't change them

• Lack of firmware updates due to device limitations

• Botnet formation using default credentials to launch DDoS attacks

• Using unencrypted communication protocols like Telnet

According to the presentation, why are IoT and mobile devices particularly vulnerable?

• They have high computing power that attracts attackers.

• They often struggle to support strong authentication and encryption

• They are not multiplying rapidly.

• They do not process sensitive personal data.

What does "Smishing" refer to?

• Disguised apps that inject malware

• Spyware that captures user activity

• Phishing via SMS to trick users into revealing credentials

• Hijacking devices to demand a ransom

Which of the following is considered a non-fraudulent threat for mobile devices?

• Spyware and keyloggers

• Excessive app permissions leading to unintentional data leakage

• Malicious APKs

• Vishing

What is a key reason for the expanding cyber-attack surface?

• A decline in data sensitivity.

• The decrease in the number of smart appliances.

• The use of strong encryption on all devices.

• The rapid multiplication of IoT and mobile endpoints

The Mirai and Mozi botnets are examples of what kind of threat?

• Non-fraudulent IoT threats

• Fraudulent mobile threats

• Non-fraudulent mobile threats

• Fraudulent IoT threats

What mitigation strategy involves separating IoT devices on different networks?

• Educating users about phishing

• Enforcing regular firmware updates

• Changing default credentials

• Network segmentation

Which of the following is NOT listed as a non-fraudulent IoT threat

• Factory default passwords being unchanged

• Identity spoofing of devices to infiltrate networks

• Use of insecure protocols like unencrypted MQTT

• Lack of firmware updates

What is a recommended strategy to establish a stronger hardware root of trust?

• Using unprotected

  Wi-Fi.

• Allowing excessive app permissions

• Disabling OS updates

• Leveraging IoT SAFE and SIM-based secure identity frameworks