What was the outcome of the social engineering attack described in the notes?

• A. Malware infection on the target machine.
• B. Password change on the receptionist account.
• C. Data exfiltration from a database.
• D. No observable effect.

Answer: (A)

Social engineering works by getting a person to take an action that lets an attacker break into or compromise a system. In the described incident, the attacker manipulated the user into executing a malicious payload or plugging in an infected device, which directly caused a malware infection on the target machine. That immediate, observable result—malware appearing on the system—is the typical outcome when the goal of the attack is to establish a foothold through the user’s actions.

Other potential outcomes like a password change or data exfiltration could happen in different scenarios, but they don’t match the described event. A password change would imply credential theft and reset activity, while data exfiltration suggests ongoing access and data leakage, neither of which is the specific observed effect here. And no observable effect would contradict the incident that resulted in an infection.