# data[].attributes.headline
How Does Social Engineering Connect to the Technical Aspects of Cybersecurity?

# data[].attributes.subject
How Does Social Engineering Connect to the Technical Aspects of Cybersecurity?

# data[].attributes.body
Social engineers seek to exploit human weaknesses

Social engineering gets large amounts of sensitive information about people, network, and devices

They also more attack channels due to social media sites, mobile communication, and wearable devices.

Forms of social engineering can also mimic the code used by legitimate websites, making it seem real.

# data[].attributes.body
Type of Phishing that targets senior employees. Massive impact on a company's cybersecurity.

By targeting the high-value member of an organization, the hacker is likely to gain access to the entire company information

They will also have the ability to impersonate the most legitimate members of the company.

# data[].attributes.body
How easy is it to commit a phishing attack?

Examples of Phishing Attacks

High-profile hacks were part of a 'coordinated social engineering attack'

# data[].attributes.body
Like baiting, a Quid Pro Quo lures users.

However, this usually takes form of a service.

If a customer needs help with their device, instead of fixing the problem the attacker installs malware on the victim’s computer.

# data[].attributes.body
Related to phishing

Attacker dangles and entices the victim with an exciting offer such as a free download

Often found on Peer-to-Peer sites

Victims may be infected with malicious software

# data[].attributes.body
Be suspicious of unsolicited phone calls or email messages.

Never provide information about your organization unless it is to an authorized person.

Do not reveal personal or financial information in an email

Pay attention to the URL of a website. Look for URLs that begin with "https" rather than "http."

If you receive a sketchy email from a company, contact them directly instead of replying to the email.

Enable multi-factor authentication whenever possible.

# data[].attributes.body
Social Engineering Attacks

Social engineering in cybersecurity: Springer

What is Social Engineering?

# data[].attributes.body
Social engineering attacks happen in several steps

First, the perpetrator investigates the intended victim to gather necessary background information

Then, the attacker moves to gain the victim’s trust

Finally, with this trust, the perpetrator tries to garner as much personal information as possible

# data[].attributes.body
Suspicious email addresses

Generic greetings such as “Dear Valued Customer”

Spoofed hyperlinks and websites

Suspicious attachments

# data[].attributes.body
One of the most common forms of social engineering attacks

Are scams through email and text messages that is aimed at creating a sense of urgency, curiosity or fear in victims.

Attackers then prod victims into revealing sensitive information, clicking on links to malicious websites, or opening attachments that contain malware.

Vishing uses voice communication to entice a victim into divulging sensitive information

# data[].attributes.body
Slow down. If the message conveys a sense of urgency or uses high-pressure sales tactics be skeptical.

Research the facts. Be suspicious of any unsolicited messages, especially if there are grammatical errors. Use a search engine to go to the real company’s site.

Don't click on unknown links. If a link provided to you looks suspicious, use a search engine to find out what the site is.

Have strong passwords. Email hijacking is rampant. Hackers, spammers, and social engineers taking over control of people’s email accounts to send links to your contacts

Beware of what you download. If you don’t know the sender or the website, then do not download it.

Offers of money or sweepstakes are fake. If you receive an email saying you won a lottery or sweepstakes, it is guaranteed to be a scam. It is designed to take your money

# data[].attributes.body
Phishing

Impersonation

Baiting

Quid Pro Quo

Piggybacking (or Tailgating)

# data[].attributes.headline
Real-World Examples of Social Engineering

# data[].attributes.subject
Real-World Examples of Social Engineering

# data[].attributes.body
Loyola Sees an Increase in Phishing Scams

Citibank Phishing Baits Customers With Fake-Suspension Alerts

Social engineering Used During Cyberattack on Axis

# data[].attributes.body
Happens in the real world

Involves a person tagging along with a legitimate employee of an organization who is authorized to enter a restricted area.

Can even be physically dangerous

# data[].attributes.body
Social engineering is the broad term for the art of psychological manipulation to trick users into give up confidential information.