Social media-based phishing where attackers pose as customer support to steal credentials.
Angler phishing exploits social media, particularly when users complain about companies publicly. Attackers monitor social media for complaints, then respond pretending to be the company's support team—offering to help resolve issues. They direct victims to fake login pages to steal credentials or request sensitive information directly. The attack exploits the victim's expectation that companies monitor and respond to social media complaints.
Why It Matters
The DSC Perspective:
Angler phishing targets users when they're frustrated and seeking help—making them less cautious. Educate staff to verify support contacts through official channels rather than responding to social media outreach.