PH!SH Framework
Framework / Themes /Internal Authority Impersonation
Sub-theme Authority impersonations

Manager Impersonation

Attackers impersonate supervisors to demand urgent tasks or document access, exploiting both authority, and urgency.

Mapped to
MITRE ATT&CK®
T1684.001Impersonation
Inherited from the parent entry.

Connected in PH!SH

Techniques
TE0001Spoofed Sender TE0009Personalization TE0011.3Compromised Internal Email Account TE0022Fake Email Thread