Masquerade is a social-engineering and tradecraft technique where an attacker imitates a trusted brand, product, service, or internal system to look legitimate. The goal is to borrow trust: a user is more likely to click, download, sign in, or approve an action when the interface or message appears familiar.
In cyber security, masquerade matters because it can open the door to initial access, malware installation, credential theft, or fraudulent payments. Common examples include counterfeit login pages, fake software updates, cloned support sites, and renamed files that mimic well-known tools. Defenders look for subtle signs of deception such as mismatched domains, unusual certificate details, unsigned installers, suspicious redirects, and unexpected child processes after launch. User awareness helps, but controls like endpoint protection, browser reputation checks, application allowlisting, and verified software distribution channels are essential because masquerade is designed to defeat recognition, not technical sophistication.