Personalization
Attackers tailor phishing content to specific individuals, roles, or organizations using gathered intelligence. This increases credibility and bypasses generic detection by mimicking legitimate, context-aware communication.
Sub-techniques
TE0009.1
Automated
Personalization is applied at scale using tools that insert names, company details, or contextual data scraped from public sources or breached data sets.
TE0009.2
Manual
Attackers handcraft messages based on targeted research (e.g., LinkedIn profiles, org charts) to closely mimic trusted communications and increase the chance of engagement.