Social Engineering

Technique · ATTACK:enterprise:T1684

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:T1684",
  "title": "Social Engineering",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1684",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--41e4d77a-6275-4976-9e35-785985598519",
  "external_id": "T1684",
  "domain": "enterprise",
  "created": "2026-04-14T22:53:26.607Z",
  "modified": "2026-05-12T15:12:00.629Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "stealth"
  ],
  "source_references": [
    {
      "source_name": "SE - Hackers Target Workday",
      "url": "https://www.cybersecuritydive.com/news/hackers-target-workday-in-social-engineering-attack/758095/#:~:text=Researchers%20cite%20increasing%20evidence%20of,told%20Cybersecurity%20Dive%20via%20email."
    },
    {
      "source_name": "Fortinet Trends 25-26",
      "url": "https://www.fortinet.com/uk/resources/cyberglossary/recent-cyber-attacks"
    },
    {
      "source_name": "Proofpoint TA427 April 2024",
      "url": "https://www.proofpoint.com/us/blog/threat-insight/social-engineering-dmarc-abuse-ta427s-art-information-gathering"
    },
    {
      "source_name": "SE Proofpoint",
      "url": "https://www.proofpoint.com/us/threat-reference/social-engineering"
    },
    {
      "source_name": "SE SentinelOne",
      "url": "https://www.sentinelone.com/blog/social-engineering-attacks-how-to-recognize-and-resist-the-bait/"
    },
    {
      "source_name": "SE SentinelOne 2",
      "url": "https://www.sentinelone.com/cybersecurity-101/threat-intelligence/types-of-social-engineering-attacks/"
    }
  ]
}

Explicit source assertions (6)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.