What Is a Drive-by Download Attack?

Why the Answer Is Correct

A drive-by download occurs when malicious code is downloaded and executed without the user's knowledge, usually because the browser or a plugin has an unpatched vulnerability. The stem matches this definition point for point: the download is unintentional, the attacker exploits flaws in browser software, and infection happens merely by visiting the malicious site. No email lure, credential theft, or ad click is required, which is the defining characteristic of this attack. That is why option A is the only choice that fully describes the scenario.

Why the Other Options Are Wrong

Phishing is a social-engineering technique that depends on user interaction such as clicking a link, opening an attachment, or entering credentials on a fake page; it does not describe exploit-driven silent installation. Internet relay chat is a communication protocol and botnet command-and-control channel, not an attack that installs malware just because a user browses a website. Malvertising is closer because malicious advertisements can lead to malware, but the term describes the advertising delivery vector rather than the browser-flaw exploitation itself. The question emphasizes unintentional download through a browser flaw during a visit, which is the textbook drive-by download.

Community Comment Notes

Elb summarized the mechanism as malware exploiting browser flaws and installing itself when a user visits a web page. aqeel1506 expanded on this, noting that malicious software is "unintentionally downloaded onto a user's computer just by visiting" a compromised or malicious site and that the attacker "exploits vulnerabilities in the browser or its plugins." Elb also cited the McAfee definition of drive-by downloads, reinforcing that the community consensus aligns with option A. All recorded votes point to A, and no commenter argued for phishing, Internet relay chats, or malvertising.