In the Cyber Kill Chain model, which phase involves combining a malicious…

Correct answer: Weaponization.

The Cyber Kill Chain is a 7-stage model developed by Lockheed Martin that describes the sequence an attacker follows to carry out an intrusion: (1) Reconnaissance, (2) Weaponization, (3) Delivery, (4) Exploitation, (5) Installation, (6) Command and Control, and (7) Actions on Objectives.

In the Weaponization phase, the attacker takes the information gathered during reconnaissance and builds a deliverable cyber weapon. This is done by coupling a malicious payload (such as a virus, worm, trojan, or remote-access tool) with a specific exploit that targets a known vulnerability in the victim's environment. A common example is embedding malware inside a weaponized document (PDF or Office file) so that opening it triggers the exploit. This step happens entirely on the attacker's side, before any contact is made with the target. Because the stem describes exactly this combining of a payload with an exploit to prepare for delivery, the answer is Weaponization.