CAPEC-410: Information Elicitation
Description
An adversary engages an individual using any combination of social engineering methods for the purpose of extracting information. Accurate contextual and environmental queues, such as knowing important information about the target company or individual can greatly increase the success of the attack and the quality of information gathered. Authentic mimicry combined with detailed knowledge increases the success of elicitation attacks.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Low
- Abstraction
- MetaA decidedly abstract characterisation of a methodology or technique.
Mechanism of attack: Collect and Analyze Information
Mitigations
CAPEC 3.9 lists no mitigation for this pattern; see its child patterns or related weaknesses.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.