Application & OT Security · Foundational

Pretexting

Creating a fabricated scenario or identity to persuade a target to disclose information or take an action.

Definition

A pretext gives the attacker a believable reason for the request, such as posing as IT support, an auditor or a vendor. Effective pretexts use OSINT about the organization's people and processes. It underpins vishing, physical impersonation and business email compromise.

Related terms