Social Engineering: Impersonation T1684.001
Tactic: Stealth
Adversaries may impersonate a trusted person or organization in order to persuade and trick a target into performing some action on their behalf. For example, adversaries may communicate with victims (via Phishing for Information, Phishing, or Internal Spearphishing) while impersonating a known sender such as an executive, colleague, or third-party vendor. Established trust can then be leveraged to accomplish an adversary’s ultimate goals, possibly against multiple victims.
Authoring guide
These 1 rule share fields, values, and exclusions.
Fields filtered most (8 distinct)
These fields appear most often in rule filters.
Top indicator values (8 distinct)
These values appear most often in rule predicates.
Exclusions (19 distinct)
These values appear most often in top-level exclusions.
Rules under this technique
These vendors publish rules tagged with this technique.
Platform: Azure
Domain: Cloud