The act of creating misleading websites for the purpose of online identity theft is called

The Correct answer is Phishing.

Key Points

• Phishing:
  • Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers.
  • It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message.
  • The recipient is then tricked into clicking a malicious link, which can lead to the installation of malware, the freezing of the system as part of a ransomware attack or the revealing of sensitive information.
  • An attack can have devastating results. For individuals, this includes unauthorized purchases, the stealing of funds, or identify theft.
  • An organization succumbing to such an attack typically sustains severe financial losses in addition to declining market share, reputation, and consumer trust.

​Additional Information

• Types of Phishing Techniques
  •   Email phishing scams
  • Spear phishing
• How to prevent Phishing​
  •    Two-factor authentication (2FA)
  • Educational campaigns can also help diminish the threat of phishing attacks by enforcing secure practices, such as not clicking on external email links.
  • In addition to using 2FA, organizations should enforce strict password management policies.​