Tactic or Technique: Impersonation: VIP

VIP impersonation is a tactic where attackers pretend to be an executive or senior leader at your company to pressure you into acting quickly. These messages are designed to feel urgent and important, often asking for wire transfers, sensitive documents, or immediate help without following the usual process.

To pull this off, attackers use display name spoofing, fake domains that look nearly identical to your company’s, or freemail accounts that match the executive’s name. The message might look like it’s from your CEO or CFO and may reference real company details to make it feel more authentic.

These attacks work by taking advantage of authority and urgency. You’re more likely to act fast when you think a leader is asking.Responding can lead to real damage, including financial loss, data leaks, and reputation damage.