Page 27 - Cyber Defense eMagazine December 2023

Doing this is not gaslighting, it’s lying. But creating a false reality in which the attacker or scammer is a
trustworthy person is similar to what a gaslighter would do when they’re establishing a relationship and
rapport with their victim – because it makes them easier to manipulate.

Reality Distortion

In relationship gaslighting, the perpetrator paints an alternate reality and tries to persuade their victim to
buy into it. For example, a cheating husband tells his wife, “I never cheated on you, you’re just paranoid!”
even if she has evidence of his transgression. If he’s convincing enough, she will question herself and
her perception.

The attacker in cybercrime does something similar: they try to persuade their victim of the false reality
that they are Apple, Amazon, the IRS, or similar. That means, the attacker distorts their victim’s reality
and instills doubt in their mind by claiming they are someone they are not.

Let’s say you get a call from the IRS, and they tell you that if you don’t pay a certain amount immediately,
you will be fined or even arrested. You may know that you’ve paid all your taxes, but the call or email
creates doubt in your mind like “Maybe I did forget”.

By skillfully distorting reality, they make you doubt your perception and memory, thereby putting
themselves in a position of power.

Power Imbalance and Vulnerability

Social engineering, gaslighting, and any other form of psychological manipulation work best when there
is a perceived power imbalance.

Gaslighting is most effective in relationships where there is a power imbalance, such as between a health
professional and their patient, or an abusive husband and his wife (or vice versa). Therefore, gaslighters
tend to seek victims who are in some way vulnerable (e.g., a trauma survivor, someone with low self-
esteem, or a patient) because the power dynamic is skewed.

In a similar vein, you’re more likely to fall for a scam when you believe you are being contacted by an
authority. Most of us have been raised to respect and obey authority, so when the “bank” calls saying
your account will be closed unless you update your bank details immediately, you’ll probably hand them
over.

That’s also why scammers often target vulnerable people, such as the elderly or recently bereaved.
Likewise, those in a financially vulnerable position may be more willing to believe they will win a million
dollars if they provide their bank details. Romance scammers tend to prey on the lonely, and scammers
targeting banks or corporations often find the “weakest link” (e.g., a person who fears they’ll lose their job
if they don’t act immediately).

Cyber Defense eMagazine – December 2023 Edition 27
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.