CAPEC-420: Influence Perception of Scarcity
Description
The adversary leverages a perception of scarcity to persuade the target to perform an action or divulge information that is advantageous to the adversary. By conveying a perception of scarcity, or a situation of limited supply, the adversary aims to create a sense of urgency in the context of a target's decision-making process.
- Likelihood of attack
- High
- Typical severity
- Low
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Engage in Deceptive Interactions
Prerequisites
- The adversary must have the means and knowledge of how to communicate with the target in some manner.
Skills required
- LowThe adversary requires strong inter-personal and communication skills.
Consequences
- ConfidentialityIntegrityAvailability
Other
Attacks that leverage the principle of scarcity can lead to the target performing an action that results in a variety of consequences that negatively affect the confidentiality, availability, and/or integrity of an application or system.
Mitigations
- An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.