CAPEC-427

Standard Abstraction Level
Meta — Very abstract, high-level category
Standard — Specific enough to understand
Detailed — Tied to specific technique
Draft MITRE CAPEC Status
Stable — Fully reviewed and complete
Draft — Under development
Incomplete — Partially defined
Deprecated — No longer recommended
Obsolete — Replaced by another CAPEC
Likelihood: Low Severity: Low
Influence via Psychological Principles

Description

The adversary shapes the target's actions or behavior by focusing on the ways human interact and learn, leveraging such elements as cognitive and social psychology. In a variety of ways, a target can be influenced to behave or perform an action through capitalizing on what scholarship and research has learned about how and why humans react to specific scenarios and cues.

Prerequisites

The adversary must have the means and knowledge of how to communicate with the target in some manner.

Mitigations

An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.

Skills Required

[Low] The adversary requires strong inter-personal and communication skills.