An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to "www.MyPersonalBank.com", that the user is directed to a phishing site. Which file does the attacker need to modify?

Question

Quizplus · Accepted Answer

The attacker would modify the "Hosts" file to redirect the user from "www.MyPersonalBank.com" to a phishing site by mapping the domain name to a different IP address.

An Attacker Has Installed a RAT on a Host