Impersonation

j_devx on 18 June, 2022 | Comments Off on Impersonation

Attackers pretends to be someone they aren’t to obtain personal information about victim.
They can use:

• Details from reconnaissance: to make the story more believable
• Attack as someone with authority (higher rank than victim)
• Technical vocabulary: to confuse
• Friendliness: to make the victim comfortable

Once the victim is at ease they extract information from victim(Eliciting information). This information can be used in all sort of fraud (Identity, Credit card: open new account on your name or use your card information, Bank: open new account or gain access to your account, Loan: make loans on your name, Government benefits/Tax fraud: money sent to attacker)

To protect against it

Never volunteer information
Don’t disclose personal details
Verify entity before revealing info: callback