Instant Messaging Delivery
The request arrived through a messaging app, a social media direct message, or a workplace chat. Attackers use chat because it's informal and often has fewer security checks than email.
Also known as
- Aliases
-
- Spearphishing via Service
- Named examples
-
- Darcula
Mapped to
MITRE ATT&CK®
Sub-techniques
TE0042.1
Microsoft Teams Delivery
The request arrived as a Microsoft Teams chat, message, or call. Messages from outside an organization can look like everyday internal workplace chat in Teams.
TE0042.2
WhatsApp Delivery
The request arrived as a WhatsApp message or call. WhatsApp reaches people directly on their phones, outside the security checks that protect work email.
TE0042.3
Slack Delivery
The request arrived as a Slack message, channel post, or call. Attackers use Slack because messages there can look like everyday workplace conversation with colleagues.