Which phishing category presents a real-looking login portal after a click?

• A. Hosted Malware
• B. Spam Emails
• C. Credential Harvesters
• D. False Positives

Answer: (C)

Credential harvesting is a phishing tactic that aims to steal login credentials by presenting a fake, real-looking login page after you click a link. The page imitates a legitimate site so you enter your username and password, which are then captured by the attacker. That “real-looking login portal after a click” is the defining feature here, because the goal is to harvest credentials directly from the user.

This differs from hosting malware, which focuses on delivering malicious software to your device rather than prompting you to enter credentials. Spam emails describe how the phishing attempt is delivered, but not the specific technique used after the click. False positives refer to legitimate items being mistaken for threats, not a phishing tactic.