Social Networking Sites

Adversaries may search social media for public information about a victim organization and its staff, such as business announcements and staff roles, locations, or interests, to inform targeting. They may also use information from these sites to create fake profiles or groups that elicit additional information and support later phishing or initial-access activity.