Analyze social and business relationships, interests, and affiliations

From pre-attack
Jump to: navigation, search


Analyze social and business relationships, interests, and affiliations
Technique
ID PRE-T1072
Tactic People Weakness Identification

Definition

Social media provides insight into the target's affiliations with groups and organizations. Certification information can explain their technical associations and professional associations. Personal information can provide data for exploitation or even blackmail.1

Difficulty for the Adversary

Easy for the Adversary (Yes/No): Yes

Explanation: Social and business relationship information for an individual can be found by examining their social media contacts (e.g., Facebook and LinkedIn). Social media also provides insight into the target's affiliations with groups and organizations. Finally, certification information can explain their technical associations and professional associations.

Detection

Detectable by Common Defenses (Yes/No/Partial): No

Explanation: Public sources are external to the defender's organization. Some social media sites have an option to show you when users are looking at your profile, but an adversary can evade this tracking depending on how they conduct the searches.