Honey Trap Social Engineering Technique
Steve, an attacker, created a fake profile on a social media website and sent a request to Stella. Stella was enthralled by Steve’s profile picture and the description given for his profile, and she initiated a conversation with him soon after accepting the request. After a few days, Steve started asking about her company details and eventually gathered all the essential information regarding her company. What is the social engineering technique Steve employed in the above scenario?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The scenario describes an attacker exploiting human desire for romance or admiration (the 'trap') rather than technical vulnerability or physical presence.
This question identifies a social engineering attack where an attacker uses a fake attractive profile to lure a victim into revealing sensitive company information. The correct answer is Honey trap, as it specifically targets emotional attraction to gain trust and access.
Learners often confuse Honey trap with Baiting; however, Baiting involves leaving infected media or items, whereas Honey trap relies on building a false personal relationship based on attraction.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Steve employed a Honey trap technique. This form of social engineering relies on using romantic or sexual allure (in this case, an attractive profile picture and description) to distract the target and lower their guard. By establishing a fake personal connection, Steve gained Stella's trust, allowing him to extract confidential company details. The key element here is the exploitation of emotion/attraction to facilitate espionage.Why the Other Options Are Wrong
Baiting involves offering something enticing (like free software or a USB drive) to induce action, not necessarily a personal relationship. Piggybacking refers to physically following someone through a secure area or gaining system access by tailgating. Diversion theft is a physical crime tactic involving distracting a person while accomplices steal goods, which does not fit this digital context.Community Comment Notes
The community consensus strongly supports D. As user marcel9999 noted, "The honey trap is a technique where an attacker targets a person online by pretending to be an attractive person..." This aligns perfectly with the scenario where Stella was 'enthralled' by Steve's profile.Exam Strategy
When analyzing social engineering questions, look for the specific trigger used: if it involves money/greed, it might be Phishing or Baiting; if it involves authority/fear, it's likely Pretexting; if it involves romance/attraction, it is definitely a Honey trap.
Frequently Asked Questions
How is Honey trap different from Phishing?
Phishing is broad and often automated/scam-based. Honey trap specifically exploits romantic or sexual attraction to build a long-term deceptive relationship for intelligence gathering.
Is Baiting the same as Honey trap?
No. Baiting uses tangible rewards like free downloads or gifts. Honey trap uses emotional/romantic manipulation to trick the victim.