Pretexting

Pretexting is a social engineering technique in which an attacker creates a believable story, identity, or situation to convince someone to provide information or take an action they normally would not.

The false story is called the pretext.

For example, an attacker might pretend to be:

• A company executive requesting an urgent payment
• An IT technician asking an employee to reset a password
• A vendor requesting a banking change
• A bank representative investigating suspicious activity
• A coworker asking for confidential information
• A new employee requesting access to a system

The attacker often researches the organization beforehand so the request contains enough accurate information to appear legitimate.

Pretexting relies less on technical exploitation and more on manipulating trust, urgency, authority, fear, or helpfulness.

What This Means for SMBs

SMBs may be particularly vulnerable because employees often know one another personally and operate with fewer formal approval processes.

A believable request that appears to come from an owner, manager, coworker, or trusted vendor may therefore receive less scrutiny.

Organizations should establish verification procedures for sensitive requests, especially those involving:

• Money transfers
• Banking information
• Payroll changes
• Password resets
• MFA changes
• Sensitive documents
• Administrative access

Employees should verify unusual requests using a trusted method of communication rather than relying only on the email, text message, or phone call that initiated the request.

What This Means for MSPs

Pretexting represents a major risk for MSP help desks because technicians have the ability to reset passwords, change MFA methods, create accounts, and modify customer environments.

An attacker who successfully impersonates a client employee or administrator may try to convince a technician to provide access.

MSPs should establish documented identity-verification procedures for high-risk support requests. Help desk employees should be trained to resist urgency and escalation tactics when the request involves security controls.

Practical Takeaway

Pretexting attacks succeed when a believable story causes someone to bypass normal security procedures.

Trust should never replace verification when a request involves money, credentials, sensitive information, or privileged access.

---

Additional Reading:

CyberHoot does have some other resources available for your use. Below are links to all of our resources, feel free to check them out whenever you like:

• Blog
• Cybrary (Cyber Library)
• Infographics
• Newsletters
• Press Releases
• Instructional Articles (HowTo) – very helpful for our Super Admins!

---

Secure your business with CyberHoot today!