Social Engineering Campaign Uses Phony NDAs to Avoid Detection
KnowBe4, Monday, September 14th, 2026
Attackers send fake non-disclosure agreements as lures because NDA attachments draw less scrutiny from filters and recipients.
KnowBe4 reports on a social engineering campaign that uses counterfeit non-disclosure agreements as the delivery vehicle.
Because NDAs are routine in business correspondence and often arrive from unfamiliar parties, both filters and recipients treat them with less suspicion.
The post describes the document lures, the credential harvesting pages they lead to, and the pretexts used to create urgency.
Security awareness training and attachment verification habits are recommended countermeasures.