## Pretexting and Impersonation

Creating a scenario (The Pretext).

### The IT Support Scam
*   **Role**: New IT Helpdesk Guy.
*   **Pretext**: "Hey, we are migrating servers and your account is desynchronized. I need to verify your password."
*   **Why it works**: Employees are trained to help IT.

### Defense
**Authentication**.
"Can you verify your employee ID?"
"I will call you back on the internal extension listed in the directory." (The attacker hates this).