What is Social Engineering? What are different types of social Engineering Attacks?
Social engineering is an attack vector that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. A social engineer runs what used to be called a “con game.” Techniques such as appeal to vanity, appeal to authority and appeal to greed are often used in social engineering attacks. Many social engineering exploits simply rely on people’s willingness to be helpful. For example, the attacker might pretend to be a co-worker who has some kind of urgent problem that requires access to additional network resources.
Popular types of social engineering attacks include:
Baiting is when an attacker leaves a malware-infected physical device, such as a USB flash drive in a place it is sure to be found. The finder then picks up the device and loads it onto his or her computer, unintentionally installing the malware.
Phishing is when a malicious party sends a fraudulent email disguised as a legitimate email, often purporting to be from a trusted source. The message is meant to trick the recipient into sharing personal or financial information or clicking on a link that installs malware.
Spear phishing is like phishing, but tailored for a specific individual or organization.
Pretexting is when one party lies to another to gain access to privileged data. For example, a pretexting scam could involve an attacker who pretends to need personal or financial data in order to confirm the identity of the recipient.
Scareware involves tricking the victim into thinking his computer is infected with malware or has inadvertently downloaded illegal content. The attacker then offers the victim a solution that will fix the bogus problem; in reality, the victim is simply tricked into downloading and installing the attacker’s malware.
We at Krash Consulting regularly carry out penetration tests that use social engineering techniques that will help the administrators to learn which types of users pose the most risk for specific types of attacks.
CALL US AT: +91 95383 61786
Get Started Now Discovering and Fixing the Threats to Your IT Environment.
There’s an old saying: “The best time to plant a tree is 20 years ago. The second-best time is today.” There’s no better time than now to start uncovering and addressing the vulnerabilities that can cause no end of expense, embarrassment, and litigation for your Organization.
It’s easy to get started and costs less than you probably think.
So please contact us. Today.