Look What You Made Me Do: TA453 Uses Multi-Persona Impersonation to Capitalize on FOMO


Joshua Miller, Kyle Eaton and Alexander Rausch

Key Takeaways

In mid-2022, TA453 deployed a social engineering impersonation technique informally called Multi-Persona Impersonation in which the threat actor uses at least two actor-controlled personas on a single email thread to convince targets of the legitimacy of the campaign.

This is an intriguing technique because it requires more resources be used per target—potentially burning more personas—and a coordinated approach among the various pe…

Read More