Attackers impersonate trusted identities — employees, vendors, executives — to gain access or trick others.
Why it matters:
- Often paired with phishing, vishing, or BEC attacks.
- Users trust the identity and follow instructions.
Pro tip: Use identity verification procedures for sensitive requests (financial, HR, IT).
Synonyms:
Spoofing