Everyone has been the recipient of a phishing email. Most have been the target of an attempted spear phishing attack. But as both end users and email security solutions have gotten better at recognizing phishing, threat actors have been forced to change tactics. Perhaps the least well-known is the “initial contact” email.
In science fiction movies, aliens make initial contact during a harmless exploration visit, assessing the earthlings before the full invasion. It’s the same concept in spear phishing. The threat actor wants to legitimize contact with a target before going in for a full-on attack. ...read more!