CAPEC Definitions
CAPEC Definitions / CAPEC-410
CAPEC-410: Information Elicitation
An adversary engages an individual using any combination of social engineering methods for the purpose of extracting information. Accurate contextual and environmental queues, such as knowing important information about the target company or individual can greatly increase the success of the attack and the quality of information gathered. Authentic mimicry combined with detailed knowledge increases the success of elicitation attacks.
Severity:Low
Possibility:
Extended Description
No Extended Description.
Mitigations
No Mitigations found.
Relationships with other CAPECs
No related CAPECs found.
Prerequisites
No prerequisites found.
Related Weaknesses
No related Weaknesses found.
