SecureAEye LAB ONLINE · SIG 657 · DET ~41s

← All attacks / Social engineering and human-targeted attacks

Scareware / pop-up phishing

Fake security alerts push fake AV downloads or scam calls

categorySocial engineering and human-targeted attacksseverityLowlabnot yet measured

Classification

14 values: 1 derived, 13 machine-classified. What do these mean?

Exploitability

Attack vector	Social engineering
Reach (CVSS)	Social
Attack complexity	Low
Privileges required	None
User interaction	Active
Attacker skill required	Low
Resources required	Low
Likelihood / prevalence	High
Maturity	Commoditized

Impact & scope

Severity	Low
Impact	Financial
Environment	On-premises
Target asset class	EndpointHuman

Detection & response

No linked mitigations or detections yet.

Framework references

Primary source: https://www.fortinet.com/resources/cyberglossary/types-of-phishing-attacks

Evidence & sources

ev-0001 (Cyber Attack Taxonomy) — Name, definition and Example/ID taken verbatim from the 'Social engineering and human-targeted attacks' table, line 44 of Cyber-Attack-Taxonomy.md