<aside> <img src="/icons/chat-user_gray.svg" alt="/icons/chat-user_gray.svg" width="40px" /> Impersonation is an attack where an adversary assumes the identity of another person to gain unauthorized access to resources or steal sensitive data

</aside>

4 main forms of impersonation used by attackers:

• Impersonation
• Brand Impersonation
• Typosquatting
• Watering Hole Attacks

Pretexting

**Pretexting** is a type of social engineering attack that involves a situation, or pretext, created by an attacker in order to lure a victim into a vulnerable situation and to trick them into giving private information, specifically information that the victim would typically not give outside the context of the pretext.

Mitigation involves training the employees not to fall for pretext and not to fill in the gaps for people when they are calling