• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

My TechDecisions

  • COVID-19 Update
  • Best of Tech Decisions
  • Topics
    • Video
    • Audio
    • Mobility
    • Unified Communications
    • IT Infrastructure
    • Network Security
    • Physical Security
    • Facility
    • Compliance
  • RFP Resources
  • Resources
  • Podcasts
  • Subscribe
  • Project of the Week
  • Latest News
  • About Us
    SEARCH
Compliance, IT Infrastructure, Network Security

5 Strangest Social Engineering Tactics of 2021

Proofpoint researchers rounded up some of the strangest lures and social engineering tactics it’s observed in 2021.

March 3, 2022 TD Staff Leave a Comment

Social Engineering
stock.adobe.com/beebright

Cyber attackers can be quite inventive when it comes to social engineering and persuading someone to do something that isn’t always in their best interest— logging into a phishing site and entering their credentials, luring victims to pay a fake invoice, or simply opening a file containing malware.

Cybersecurity firm Proofpoint rounded up the top five strangest lures and social engineering tactics of 2021:

#5 Soccer Scouting

Last year, Proofpoint researchers noticed multiple social engineering campaigns using soccer to deliver malware to clubs in France, Italy and in the U.K. The threat actor posed as a sports agent representing young players in Africa and in South America, seeking their big break into one of the sport’s richest leagues.

The email was sent to soccer clubs with legitimate video files and YouTube links showing training and match highlights. Victims who were intrigued by the video footage were instructed to download and enable a Microsoft Excel document infected with malware.

Related: How To Protect Against Macro-Based Malware

#4 Spoofing Scholars

Over the summer, Proofpoint reported activity involving an Iran-based threat actor, targeting European academics and policy experts. The attacker posed as a senior research fellow at the University of London using a lookalike email address spoofing a real scholar. The goal of the campaign was to steal credentials via a fake webinar signup page, but before setting this end game in motion, the attacker invested significant time in building relationships. It wasn’t limited to just email communications, the actor was attempting to engage via phone calls and video conferencing in the course of building report with victims.

#3 Fake by Functional

In August of 2021, Proofoint researchers noticed an attacker sending a Microsoft Excel file containing a functional freight calculator. However, when the victim persuaded by the convincing design, found that their shipping quote actually came with a bonus delivery of malware.

#2 Good News, Bad News,

Cyber attackers are experimenting with A/B testing, a concept familiar to most marketers. Proofpoint noted a campaign launched before the end of the year, in which some recipients received a message informing them that their employment was terminated, while others got news of a promotion or  that they received a holiday bonus. By downloading the Excel file and clicking “enable content,” resulted in a Trojan being dropped on the victims’ computer. Once the malware download began, victims were greeted with a “Merry Xmas” pop up.

#1 Inheritance or lottery win – why not both?

We all may have received that occasional email from a long-lost family member who left behind an inheritance of 2.5 million, “click now to claim” scheme. A fraudster attempted to weave an email like this last year, posing as a Chief Justice of Canada, also adding in the email that the recipient had won additional lottery winnings, and the Bank of Canada has come to collect the money. The attacker claimed all of it could be resolved for the modest sum of just $100 and once the payment was received, the winnings would be available in the form of an ATM visa card.

Proofpoint notes “this advanced fee fraud is renowned for occasionally outlandish social engineering tactic, but for its sheer range and variety, this one takes the cake.”

Tagged With: Malware, Proofpoint, social engineering

Related Content:

  • Why Data and Analytics Are Critical in the…
  • Cisco Catalyst IW9167 Series Cisco Announces Cisco Catalyst IW9167 Series for Industrial,…
  • 10 Cybersecurity Mistakes 10 Common Cybersecurity Mistakes Your Organization is Making
  • UNC 140-seat Surgical Education Center Top-Ranked Med School Outfits Surgical Education Center with…

Free downloadable guide you may like:

  • The State of the IT Department in 2022

    The role of the IT professional has shifted from one that supports the business to one that is deserving of a seat at the table when it comes to making business decisions. Check out our new report to see what your peers in IT think about top concerns and opportunities in 2022.

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Get the FREE Tech Decisions eNewsletter

Sign up Today!

Latest Downloads

The State of the IT Department in 2022

The role of the IT professional has shifted from one that supports the business to one that is deserving of a seat at the table when it comes to ma...

Hybrid Work Challenges
The Three Most Common Hybrid Work Challenges Two Years Into the Pandemic

Many of us have been working in a hybrid environment for two years now. Our editors thought this would be a good time to take a look at what’s work...

These 10 IT Certifications Are Critical To An IT Pro’s Success in 2022

Here are 10 cloud, data and security certifications that we identify as critical to an IT professional’s resume in 2022 and beyond, according to a ...

View All Downloads

Would you like your latest project featured on TechDecisions as Project of the Week?

Apply Today!
Sharp Microsoft Collaboration HQ Logo

Learn More About the
Windows Collaboration Display

More from Our Sister Publications

Get the latest news about AV integrators and Security installers from our sister publications:

Commercial IntegratorSecurity Sales

AV-iQ

Footer

TechDecisions

  • Home
  • Welcome to TechDecisions
  • Subscribe to the Newsletter
  • Contact Us
  • Media Solutions & Advertising
  • Comment Guidelines
  • RSS Feeds
  • Terms of Use
  • Privacy Policy
  • Twitter
  • Facebook
  • Linkedin

Free Technology Guides

FREE Downloadable resources from TechDecisions provide timely insight into the issues that IT, A/V, and Security end-users, managers, and decision makers are facing in commercial, corporate, education, institutional, and other vertical markets

View all Guides
TD Project of the Week

Get your latest project featured on TechDecisions Project of the Week. Submit your work once and it will be eligible for all upcoming weeks.

Enter Today!

© 2022 Emerald X, LLC. All rights reserved.