CAPEC-422

Influence Perception of Commitment and Consistency
2014-06-23
00h00 +00:00
Cao
Thấp
Stable
2020-12-17
00h00 +00:00
Cảnh báo cho một CAPEC
Luôn được thông báo về mọi thay đổi đối với một CAPEC cụ thể.
Quản lý thông báo

Mô tả CAPEC

An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.

Thông tin CAPEC

Điều kiện tiên quyết

The adversary must have the means and knowledge of how to communicate with the target in some manner.

Kỹ năng cần thiết

The adversary requires strong inter-personal and communication skills.

Tài nguyên cần thiết

None: No specialized resources are required to execute this type of attack.

Các biện pháp giảm thiểu

An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
Individuals should avoid complying with suspicious requests.

Tài liệu tham khảo

REF-348

The Official Social Engineering Portal
http://www.social-engineer.org

Gửi

Tên Tổ chức Ngày Ngày phát hành
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Sửa đổi

Tên Tổ chức Ngày Bình luận
CAPEC Content Team The MITRE Corporation 2017-08-04 +00:00 Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Description Summary, Methods_of_Attack, References, Related_Attack_Patterns, Resources_Required, Solutions_and_Mitigations, Typical_Likelihood_of_Exploit
CAPEC Content Team The MITRE Corporation 2020-12-17 +00:00 Updated Mitigations