In order to play a this card, a dice must be thrown.
This is a phishing type attack that should have a higher rate of success b because it relies on previous legit email exchange. This card can be used to disclose information on the corporation side (e.g. reveal an asset, and agenda or user credentials) or to achieve exploitation. In order to achieve exploitation the attacker needs to play an exploit that matches the vulnerability found on that hosts (if any).
This card can also be used to obtain money (only one purpose at the time!).
If the player has position/player an insider threat card inside the company and this card is being played, the chances of success should increase however, after this card is being played the insider threat card must be trashed/discarded.
The chances of this attack succeeding depends on the current level of the player.
Chances of success of this card will increase as the hacker level up its tier.
The name of the card
|
Chain Letter and Hoaxe |
|---|---|
|
The card type
|
Social Engineering card type |
|
Whether this card was meant to be played as part of another card
|
Single |
|
Whether this card must be trashed after being player or not
|
Play once |
|
Whether a certain requirement must be met before this card can be played
|
Attacker must have installed a web server in order to play this card. |
|
The ATT&CK tactic this card belongs to
|
Initial AccessPhishing type like of attack that should have a higher rate of succedded because it relies on previous legit email exchange |
|
The ATT&CK technique this card belongs to
|
|
|
Amount of bitcoins the player needs to pay in order to play this card
|
|
|
The amount of bitcoins the player needs to play to retreat this card
|
|
|
Cards that will counter this card
|
Security Awareness Training Card reduces direct the chances of success of this card. Patching and updating systems reduces indirectly the chances of success of this card. |
|
How rare this card is
|
Low |