Keeping Up Appearances
Now that we understand how to use a Word document
and a macro to get remote access on a client,
we can turn our attention to the more human element
of getting the victim to actually execute it.
When performing a client-side phishing attack, we must deceive the victim.
In some cases, we must deceive them multiple times.
For example, we might need to convince them to open a file, enable options,
such as enabling macros, or browse to a given URL.
All of this must occur without alerting them to our malicious intent and action.
To do this, we must rely on pretexting.
A pretext is essentially a false motive.
We’ll use this false motive in a social engineering attack,
essentially lying to our target
to convince them to do something they wouldn’t normally do.