• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

My TechDecisions

  • Best of Tech Decisions
  • Topics
    • Video
    • Audio
    • Mobility
    • Unified Communications
    • IT Infrastructure
    • Network Security
    • Physical Security
    • Facility
    • Compliance
  • RFP Resources
  • Resources
  • Podcasts
  • Project of the Week
  • About Us
    SEARCH
Compliance, IT Infrastructure, Network Security

5 Strangest Social Engineering Tactics of 2021

Proofpoint researchers rounded up some of the strangest lures and social engineering tactics it’s observed in 2021.

March 3, 2022 TD Staff Leave a Comment

Social Engineering
stock.adobe.com/beebright

Cyber attackers can be quite inventive when it comes to social engineering and persuading someone to do something that isn’t always in their best interest— logging into a phishing site and entering their credentials, luring victims to pay a fake invoice, or simply opening a file containing malware.

Cybersecurity firm Proofpoint rounded up the top five strangest lures and social engineering tactics of 2021:

#5 Soccer Scouting

Last year, Proofpoint researchers noticed multiple social engineering campaigns using soccer to deliver malware to clubs in France, Italy and in the U.K. The threat actor posed as a sports agent representing young players in Africa and in South America, seeking their big break into one of the sport’s richest leagues.

The email was sent to soccer clubs with legitimate video files and YouTube links showing training and match highlights. Victims who were intrigued by the video footage were instructed to download and enable a Microsoft Excel document infected with malware.

Related: How To Protect Against Macro-Based Malware

#4 Spoofing Scholars

Over the summer, Proofpoint reported activity involving an Iran-based threat actor, targeting European academics and policy experts. The attacker posed as a senior research fellow at the University of London using a lookalike email address spoofing a real scholar. The goal of the campaign was to steal credentials via a fake webinar signup page, but before setting this end game in motion, the attacker invested significant time in building relationships. It wasn’t limited to just email communications, the actor was attempting to engage via phone calls and video conferencing in the course of building report with victims.

#3 Fake by Functional

In August of 2021, Proofoint researchers noticed an attacker sending a Microsoft Excel file containing a functional freight calculator. However, when the victim persuaded by the convincing design, found that their shipping quote actually came with a bonus delivery of malware.

#2 Good News, Bad News,

Cyber attackers are experimenting with A/B testing, a concept familiar to most marketers. Proofpoint noted a campaign launched before the end of the year, in which some recipients received a message informing them that their employment was terminated, while others got news of a promotion or  that they received a holiday bonus. By downloading the Excel file and clicking “enable content,” resulted in a Trojan being dropped on the victims’ computer. Once the malware download began, victims were greeted with a “Merry Xmas” pop up.

#1 Inheritance or lottery win – why not both?

We all may have received that occasional email from a long-lost family member who left behind an inheritance of 2.5 million, “click now to claim” scheme. A fraudster attempted to weave an email like this last year, posing as a Chief Justice of Canada, also adding in the email that the recipient had won additional lottery winnings, and the Bank of Canada has come to collect the money. The attacker claimed all of it could be resolved for the modest sum of just $100 and once the payment was received, the winnings would be available in the form of an ATM visa card.

Proofpoint notes “this advanced fee fraud is renowned for occasionally outlandish social engineering tactic, but for its sheer range and variety, this one takes the cake.”

If you enjoyed this article and want to receive more valuable industry content like this, click here to sign up for our digital newsletters!

Tagged With: Malware, Proofpoint, social engineering

Related Content:

  • Cloud, SASE, Aryaka How the Cloud is Redefining Media Production and…
  • Software License Spending, SaaS, cloud apps Your Guide to Choosing the Best Cloud Security…
  • IT Budget 2025 Budgeting Tips for IT Pros/CIOs in 2025
  • A close-up of a technician’s hands typing and navigating through troubleshooting steps on a computer in a well-lit office. , natural light, soft shadows, with copy space Five Ways to Reduce Desktop Support Troubleshooting Time

Free downloadable guide you may like:

  • Practical Design Guide for Office SpacesPractical Design Guide for Office Spaces

    Recent Gartner research shows that workers prefer to return to the office for in-person meetings for relevant milestones, as well as for face-to-face time with co-workers. When designing the office spaces — and meeting spaces in particular — enabling that connection between co-workers is crucial. But introducing the right collaboration technology in meeting spaces can […]

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Latest Downloads

Practical Design Guide for Office Spaces
Practical Design Guide for Office Spaces

Recent Gartner research shows that workers prefer to return to the office for in-person meetings for relevant milestones, as well as for face-to-fa...

New Camera Can Transform Your Live Production Workflow
New Camera System Can Transform Your Live Production Workflow

Sony's HXC-FZ90 studio camera system combines flexibility and exceptional image quality with entry-level pricing.

Creating Great User Experience and Ultimate Flexibility with Clickshare

Working and collaborating in any office environment today should be meaningful, as workers today go to office for very specific reasons. When desig...

View All Downloads

Would you like your latest project featured on TechDecisions as Project of the Week?

Apply Today!

More from Our Sister Publications

Get the latest news about AV integrators and Security installers from our sister publications:

Commercial IntegratorSecurity Sales

AV-iQ

Footer

TechDecisions

  • Home
  • Welcome to TechDecisions
  • Contact Us
  • Comment Guidelines
  • RSS Feeds
  • Twitter
  • Facebook
  • Linkedin

Free Technology Guides

FREE Downloadable resources from TechDecisions provide timely insight into the issues that IT, A/V, and Security end-users, managers, and decision makers are facing in commercial, corporate, education, institutional, and other vertical markets

View all Guides
TD Project of the Week

Get your latest project featured on TechDecisions Project of the Week. Submit your work once and it will be eligible for all upcoming weeks.

Enter Today!
Emerald Logo
ABOUTCAREERSAUTHORIZED SERVICE PROVIDERSYour Privacy ChoicesTERMS OF USEPRIVACY POLICY

© 2025 Emerald X, LLC. All rights reserved.