Escalation Attack

Escalation Attack

Short Description: Sending an easily identified phishing email to a user who forwards it to IT support.

CAT ID: CAT-2022-230

Layer: 8, 9

Operational Scale: Multiple Scales

Level of Maturity: Proof of Concept

Category: TTP

Subcategory:

Also Known As:

Description:

Brief Description:

Closely Related Concepts:

Mechanism:

Multipliers:

Detailed Description: Sending an easily identified phishing email to a user who then forwards it to their IT department, who in turn clicks the link to identify where it leads and there by exposes themselves (a user with higher privileges) to the phishing threat. This might also be employed to reach higher levels of management when a direct attack isn't feasible.

INTERACTIONS [VETs]:

Examples:

Use Case Example(s):

Example(s) From The Wild: