Behavioral and Emotional Triggers
Attackers exploit emotional triggers—such as fear, urgency, or curiosity—to manipulate user behavior and drive engagement with phishing content. These tactics override rational decision-making and increase the likelihood of compromise.
Mapped to
MITRE ATT&CK®
Sub-techniques
TE0008.1
Fear
Induces anxiety through threats like account closure, legal action, or security breaches to pressure victims into immediate action.
TE0008.2
Greed
Promises financial gain, rewards, or exclusive opportunities to entice victims into clicking links or sharing sensitive data.
TE0008.3
Urgency
Creates a false sense of time pressure to rush victims into acting without verifying the message's legitimacy.
TE0008.4
Curiosity
Leverages intriguing, sensational, or ambiguous messages to provoke engagement and interaction with malicious content.
TE0008.5
Loss
Exploits fear of missing out or losing access, rewards, or assets to provoke rash decisions and increase susceptibility.
TE0008.6
Reward Seeking
Appeals to desire for gain—such as prizes, perks, or recognition—to entice engagement with harmful content.
TE0008.7
Scarcity
Manipulates perception of limited availability—like exclusive offers or spots—to drive impulsive user actions.
TE0008.8
Conformity
Leverages social proof or peer behavior to pressure targets into compliance with fraudulent instructions.
TE0008.9
Authority
Invokes perceived authority figures (e.g., executives, law enforcement) to coerce cooperation and override skepticism.
TE0008.10
Empathy
Exploits compassion by posing as individuals in distress or charitable causes to evoke emotional responses and action.
TE0008.11
Approval
Targets desire for validation or praise to influence users into completing harmful tasks or revealing sensitive data.
TE0008.12
Reciprocity
Exploits the urge to return favors by offering deceptive help, rewards, or gestures to prompt disclosure of data or access.
TE0008.13
Commitment
Exploits prior actions or expressed intentions to nudge users toward consistency-based compliance with malicious prompts.