Pretexting
(OBJ 2.2)
Pretexting
- Gives some amount of information that seems true so that the victim will give more information
- Example: Ask for the IP address of a printer by mentioning some brand and model and that you installed those last week and just want to check some issue with printing
Mitigation
- Mitigation involves training the employees not to fall for pretext and not to fill in the gaps for people when they are calling