Menu

Elicitation

Elicitation is the process of gaining information without directly asking for it. When an attacker asks about sensitive information directly it may seem suspicious. Attackers will use open-ended or leading questions to lead the target to the sensitive data they're after.

Business Email Compromise

A Business Email Compromise is related to elicitation because it adds a level of trust. With the added trust the victim may give more sensitive information.