CAPEC-417: Influence Perception
CAPEC版本: 3.9
更新日期: 2023-01-24
攻击模式描述
The adversary uses social engineering to exploit the target's perception of the relationship between the adversary and themselves. This goal is to persuade the target to unknowingly perform an action or divulge information that is advantageous to the adversary.
前提条件
- The adversary must have the means and knowledge of how to communicate with the target in some manner.
所需技能
所需资源
- There are no necessary resources required for this attack.
后果影响
影响范围: Confidentiality Integrity Availability
技术影响: Other
说明: Attacks that influence the perception of the target can result in a wide variety of consequences and negatively affect potentially the confidentiality, availability, and/or integrity of an application or system.
缓解措施
An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.