| Attacker impersonates a department head to get contacts of various employees in the department he is attacking. |
|
 | Hello I am Director of Facilities contacting you for the telephone numbers of my whole department. I figured human resources would have a list complied of everyone's information in the department. | |
|
|
|
|
|
|
| Human resources employees who has never met the department head before falls for the trap. |
|
|
| Yes sir I should be able to send the contact list of your department to you. | |
|
|
|
|
|
| Attacker continues to impersonate the department head and is successfully able to get away with the information. |
|
| Okay thank you, I should be able to update my contact list now. | |
|
|
|
|
|
|
