Jane encountered a combination of social engineering tactics:
* Spear Phishing:
* CEO Impersonation Email: The initial email and the follow-up with the scanned image of the CEO's handwritten note are examples of spear phishing, where attackers target specific individuals with tailored messages to gain their trust and extract sensitive information.
* Vishing:
* 'IT Support' Call: The phone call from the supposed 'IT support' representative asking Jane to download a 'security patch' is a form of vishing (voice phishing). This tactic involves using phone calls to trick victims into revealing sensitive information or performing actions that compromise security.
References:
* Social Engineering Techniques: SANS Institute Reading Room
* Phishing and Vishing Explained: Norton Security