Social Engineering Campaign Uses Phony NDAs to Avoid Detection

Researchers at Gen Digital tracked a targeted social-engineering campaign that used forged NDAs and impersonation (including a fake PwC contact) to coax an employee into moving communications to WhatsApp and personal email, with the ultimate aim of enabling a payment request. The attackers leveraged detailed reconnaissance and a plausible acquisition narrative referencing Avast/NortonLifeLock/Gen Digital; the attempt failed when the employee recognized inconsistencies and did not comply, and there is no evidence of malware or wider compromise.