Engage Goals: EGO0001 Expose, EGO0003 Elicit
Engage Approach: EAP0001 Collect, EAP0002 Detect
Engage Actions: EAC0009 Email Manipulation, EAC0015 Information Manipulation
Name of Element: Deceptive Phishing Email with Delayed Delivery
Description of Element:
Goal: Deceptive Phishing Email with Delayed Delivery
Approach: This element involves sending a deceptive phishing email to employees that appears to be legitimate but is intentionally delayed in delivery.
Attackers who open or interact with the delayed email will be identified and their actions will be logged. This information can be used to improve defenses and make it more difficult for attackers to phish employees.
Technical Context:
This element can be combined with other deceptive elements, such as fake accounts or deceptive network configurations, to enhance its effectiveness. It aligns with the MITRE ATT&CK technique T1566.001 (Phishing: Spearphishing Attachment).
Other:
This element can be used in conjunction with other deceptive elements, such as a fake landing page, to gather additional information about attackers.