Attackers Target Executives’ Families to Reach Corporate Networks
Summary
Attackers exploit executives’ relatives through social engineering, compromised devices, and exposed personal information. The article urges families to reduce digital footprints, use strong passwords and MFA, protect against SIM swapping, and recognize scams.
Key points
- Attackers may compromise a family member’s device or account and use it as a path toward an executive or corporate network.
- Common approaches include impersonation, phishing or smishing, SIM swapping, and reconnaissance using social media and public records.
- Exposed calendars, location data, travel plans, and family communications can create both cybersecurity and physical-safety risks.
- The article cites a 2025 survey in which 51% of organizations reported attacks on business leaders, up from 43% in 2023.
- Recommended safeguards include limiting public personal information, using strong passwords and MFA, avoiding SMS-based MFA where possible, and enabling SIM-swap protections.
- Families should watch for impersonation attempts, QR-code lures, and fake delivery, bank, or school messages.
Article Details
- Topic
- Cybersecurity risks to executives through attacks on their family members and friends, and the need for broader security awareness and protective practices.
People
Brian HillField chief information security officer of client advisory at BlackCloak; discussed risks to executives and their families.Charles CarmakalMandiant's CTO; warned in 2024 that cybercriminals were targeting executives' children in SIM-swapping attacks.Erich KronCISO advisor at KnowBe4; discussed social engineering risks to executives' families and friends.Jeremy BanonCEO and founder of The Cyber Health Company; discussed indirect attacks through executives' relatives and protective practices.Matt HullVice president of cyber intelligence and response at NCC Group; discussed attackers using personal information for reconnaissance and targeting.
Vendors
BlackCloaka network, says Brian Hill, field chief information security officer (CISO) of client advisory at BlackCloak.Dragoskey executives and family members had experienced at least one attack by a cybercriminal. That same year, Dragos blocked a ransomware attack where a threat actor contacted family members after an executive ignoredKnowBe4Bad actors have always been opportunistic, and everyone is at risk when it comes to using family or friends to get to a VIP, says Erich Kron, CISO advisor at KnowBe4.Mandiantattack where a threat actor contacted family members after an executive ignored ransom demands. Mandiant's CTO, Charles Carmakal, warned during RSAC Conference in 2024 that cybercriminals were targetingNCC Groupprofessional lives as separate, notes Matt Hull, vice president of cyber intelligence and response at NCC Group, which has tracked this trend over the years. Details that appear harmless, such as interests, hobbies,The Cyber Health Companyfail, it actually increases the likelihood of success, explains Jeremy Banon, CEO and founder of The Cyber Health Company.