How attackers identify your organization’s weakest links

The social network is often the starting place for determining who is a good target in an organization as well as a source for usernames and email addresses. There are several tools used by attackers to scrape information from LinkedIn. Once the attacker has the email addresses of targeted users, there are a number of techniques attackers can use to infiltrate a network. One tool that specifically targets Office 365, office365userenum, allows an attacker to go through a list of possible username and then observe the response.”]

Source: https://www.csoonline.com/article/3411935/how-attackers-identify-your-organizations-weakest-link.html