Phone pre-texting is used by threat actors to obtain sensitive data or service/system access, where they play the role of an authority figure who requires or needs access to information in order to assist the victim. Depending on the approach you choose, we can attempt to get targeted employees to download malicious files, following fraudulent links or disclose login credentials over the phone.
Onsite pre-texting is where bad actors impersonate someone such as an IT specialist or HR representative to gain access to sensitive information or a system/service. Onsite pre-texting may take place in person or online. We may use techniques like lock picking, badge replication, service provider impersonation and rogue devices to gain access. This can be combined with phishing, phone pre-texting and penetration testing to form a full-scope Red Team Assessment.
