A regional healthcare provider in Portland, Oregon, recently migrated its patient scheduling portal to a...

The correct answer is B. Pharming.

The scenario describes users being directed to a fraudulent website that closely resembles the legitimate portal and then being prompted to submit credentials. Among the available options, this best aligns with pharming because the key behavior is redirection or misdirection of users’ web traffic to a fake website designed to harvest credentials.

CEH-aligned social engineering material describes pharming as a phishing-related variant involving redirection of a user’s web traffic and refers to it as “phishing without a lure.” The same reference distinguishes spimming as spam over instant messaging and whaling as a phishing attack targeting high-level executives . CEH web attack material also explains that attackers may use fake websites that look legitimate to extract login details from victims .

Option A. Whaling is incorrect because whaling targets senior executives or high-value individuals.

Option C. Spear Phishing is incorrect because spear phishing is a targeted phishing message sent to a specific individual or small group, usually through email.

Option D. Spimming is incorrect because spimming involves spam messages sent over instant messaging platforms.

Option B. Pharming is the best answer because the attack directs users to a fake portal where credentials are harvested.

Therefore, the best answer is B. Pharming.