Case Study: Psychological Analysis

Case Study: Psychological Analysis

Examining a real attack through a psychological lens:

The RSA Breach (2011): Attackers sent emails with the subject "2011 Recruitment Plan" containing an infected Excel file.

Psychological Elements:

  • Curiosity: Recruitment information naturally interests employees
  • Relevance: Targeted HR and employees interested in career development
  • Authority: Appeared to come from management
  • Social Proof: Sent to multiple employees simultaneously
  • Timing: Aligned with annual review cycles

The attack succeeded because it expertly combined multiple psychological triggers relevant to the targets.