CAPEC-422 — Influence Perception of Commitment and Consistency
CAPEC-422: Influence Perception of Commitment and Consistency
MITRE CAPEC attack pattern
| Status | Stable |
| Typical severity | Low |
| Likelihood of attack | High |
| Catalogue | CAPEC 3.9 (2023-01-24) |
Description
An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.
Prerequisites
- The adversary must have the means and knowledge of how to communicate with the target in some manner.
Skills required
- Low: The adversary requires strong inter-personal and communication skills.
Consequences
- Confidentiality, Integrity, Availability: Other
Mitigations
- An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
- Individuals should avoid complying with suspicious requests.