BlackHat recording: Analyzing the Role of Pretexting in CTI and Attribution