2 ms·
Social engineering is the usual approach I think. If you can make a person believe that a request is coming from a trusted person or authority, most will not qu
by ams6110 10y ago
Social engineering is the usual approach I think. If you can make a person believe that a request is coming from a trusted person or authority, most will not question it.
If you got an email from your boss with an attached document or link with a request to "please review" would you really give it much of a second thought?
- qq66 10y agoAn attachment would need to be an executable though, or use an RCE exploit in the email client or document viewer.