search

vz-risk / veris

Vocabulary for Event Recording and Incident Sharing (VERIS)
http://verisframework.org
Other
565 stars 161 forks source link

update definition of social.baiting #449

Open gdbassett opened 1 year ago

gdbassett commented 1 year ago

Baiting definition currently only refers to planting infected media. Should it be updated to include any situation where the attacker waits somewhere where victims comes to them. This would including leaving media in parking lots to be picked up, malicious links on SEO websites, and waterhole attacks. This would be in contrast to phishing (where the attacker reaches out to the victim).

gdbassett commented 1 year ago

"prepare malicious content in a location where a victim is likely to interact with it. (e.g. SEO - vect: websites, left usbs- vect: removable media, etc)"