What Is the Best Example of a Scareware Attack?
Short answer
C The pop-up claiming possible spyware infection and offering an anti-spyware tool is scareware, using fear of malware to push fake security software.
Question
Key Takeaways
The question tests whether you can distinguish scareware from other social engineering lures; the trap is choosing an alarming account-lockout message instead of a fake malware infection warning.
Scareware is a social engineering attack that uses fake security alerts to frighten users into installing or buying bogus tools. This page confirms that the spyware-infection pop-up in option C is the best example because it directly leverages fear of malware.
Common mistake: Many learners pick option B because an account-lockout warning sounds frightening, but it is credential phishing; scareware specifically uses fake malware or spyware infection alerts to push bogus security software.
Expert Analysis
Why the Answer Is Correct
Scareware is a social engineering tactic that presents alarming security warnings, usually through pop-ups, to frighten a user into downloading, buying, or installing fake antivirus or anti-spyware software. Option C matches this definition directly: the message claims the computer may have spyware and offers an anti-spyware tool to resolve it. The wording is intentionally fear-driven and urgent, pushing the victim toward the attacker's payload. This is the classic scareware pattern tested in the CEH social engineering domain.
Why the Other Options Are Wrong
Option A is a prize or advance-fee lure that exploits greed rather than fear of malware. Option B is an account-lockout phishing message that directs the user to reset credentials, so it targets account access rather than fake security software. Option D is a delivery-notification lure based on curiosity or concern about an order. None of A, B, or D asks the user to install an anti-spyware tool in response to a fabricated infection warning.
Community Comment Notes
As shaody noted, scareware is "often seen in pop-ups that tell the target user that their machine has been infected with malware," which directly supports option C. Slim656 similarly explains that scareware uses deceptive tactics to scare users into downloading or purchasing fake security software. insaniunt also selected the same spyware-infection pop-up scenario, reinforcing the community consensus around option C.
Official Reference
https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks
This link opens the official vendor documentation in a new tab.
Exam Strategy
Map the emotional trigger in each option to the attack type: scareware relies on fear of malware and fake security tools, while account-lockout lures are credential phishing and prize lures are baiting. When an option offers an anti-spyware download after an infection warning, suspect scareware.
Frequently Asked Questions
Why is the locked-account banner in option B not the best scareware example?
How can users recognize a scareware pop-up like option C?
Community Votes
100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
insaniunt 👍 3 Answered CC. A pop-up appears to a user stating, "Your computer may have been infected with spyware. Click here to install an anti-spyware tool to resolve this issue."
-
Slim656 👍 1C. A pop-up appears to a user stating, "Your computer may have been infected with spyware. Click here to install an anti-spyware tool to resolve this issue." Scareware is a type of social engineering attack where malicious actors use deceptive tactics to scare users into taking certain actions, usually involving downloading or purchasing fake security software. Option C fits this description because it creates a sense of urgency and fear about a potential spyware infection, urging the user to click on a link to install what is often a fraudulent or harmful program.
-
shaody 👍 1 Answered CScareware is often seen in pop-ups that tell the target user that their machine has been infected with malware.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.