Sub-theme Authority impersonations

CXO Impersonation

Attackers pose as high-ranking executives (CEO, CFO, COO) to pressure employees into urgent actions, such as transferring funds or sharing confidential documents.

Mapped to

MITRE ATT&CK®

T1684.001Impersonation

Inherited from the parent entry.

Connected in PH!SH

Techniques

TE0001Spoofed Sender TE0009Personalization TE0011.3Compromised Internal Email Account TE0022Fake Email Thread TE0028Emotional Framing