An employee at a crypto security company receives an email that appears to be internal to the IT department. The email informs the employee to update the login credentials immediately to prevent account suspension.

The "From" field in the email displays $"$it$\_$support@cryptosecure.com." However, upon closer inspection, the employee notices the slightly misspelled domain name as $"$crypt$0$secure$.$com."

What technique is the threat actor using in this phishing attempt? $($Select two.$)$

answer

Spoofing

Pretexting

Pharming

Brand impersonation

Typosquatting