3 ms·
Is spoofing an email and sending a PDF/Office exploit really considered sophisticated? Maybe. I'd say a targeted email, using a believable, researched sender a
by joosters 12y ago
Is spoofing an email and sending a PDF/Office exploit really considered sophisticated?
Maybe. I'd say a targeted email, using a believable, researched sender address and relevant contents, would be fairly sophisticated. It would certainly be way more effective than the bulk 'please pay this generic invoice' exploits that I get spammed with.
- AlyssaRowan 12y agoSpear phishing, as its nicknamed? If something is sophisticated enough to work, don't knock it! There's no fundamental difference between the basic techniques used by malicious hackers, organised crime, pentesters or nation-state adversaries doing offensive "cyber-operations" (ugh): the only big difference is the budget (time, personnel, money), how likely they are to get away with it, and how aggressive they are.