Beware of "Get to Know Me" Surveys

This article explains how attackers exploit personal and organizational details shared through social media surveys, workplace questionnaires, hobby forums, news and public documents, and spoofed support pages to conduct social engineering, including BEC-style scams and malware delivery, and it recommends defenses such as continuous user education, avoiding online surveys and unnecessary app permissions, restricting social media visibility, carefully vetting public disclosures, running simulated phishing tied to publicly available data, and using strong unique passwords with phishing-resistant MFA.