CAPEC-422 Influence Perception of Commitment and Consistency

An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.

• The adversary must have the means and knowledge of how to communicate with the target in some manner.

• [Low] The adversary requires strong inter-personal and communication skills.

• Confidentiality, Integrity, Availability: Other

• An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks. • Individuals should avoid complying with suspicious requests.