# data[].attributes.headline
What is "Social Engineering" & what role does it play in technical cyberattacks?

# data[].attributes.subject
What is "Social Engineering" & what role does it play in technical cyberattacks?

# data[].attributes.headline
Article: Medical Data Leaked in Sacramento County Phishing Scam

# data[].attributes.subject
Article: Medical Data Leaked in Sacramento County Phishing Scam

# data[].attributes.attachment_link.title
Sacramento County, Calif., Phishing Scam Exposed Data

# data[].attributes.attachment_link.description
Thousands of records containing health information and hundreds more with personal identifying information were exposed after a phishing scam involving Sacramento County employees last year.

# data[].attributes.attachment_link.title
Americans Lost $1 Billion To Romance Scammers Last Year, FBI Says

# data[].attributes.attachment_link.description
As Valentine’s Day grows near, federal authorities are warning lovesick Americans to watch out for sketchy requests for cryptocurrency by romance scammers.

# data[].attributes.headline
Article: Social Engineering Attacks During COVID

# data[].attributes.subject
Article: Social Engineering Attacks During COVID

# data[].attributes.body
The mass move to virtual spaces caused by COVID-19 increased the amount of data usage immensely. Check out this academic paper on how hackers leveraged this data increase for social engineering attacks.

# data[].attributes.body
Deepfakes are one of the most modern/advanced impersonation tactics. Watch this video on how deepfakes have interfered in political election

# data[].attributes.headline
3 Major Effects of Social Engineering on Cyber Security:

# data[].attributes.subject
3 Major Effects of Social Engineering on Cyber Security:

# data[].attributes.body
1. Spreading malware - Rather than hacking into a network and using technical skills to install malware without detection, hackers can simply guide their victim to do the work for them! These social engineering schemes commonly use corrupted links in scam emails. Simple, recognizable hyperlinks such as "Unsubscribe" are affective in garnering rapid, mindless clicks

2. Volumetric/mass Attacking - phishing tactics allow hackers to target populations as a whole (by applying general psychology) rather than focusing on zeroing in on the weaknesses/vulnerabilities of a particular system.

# data[].attributes.body
In this ranking of the effectiveness of the top cyber threats (according to ISACA) social engineering is said to be the threat most responsible for business compromise

# data[].attributes.attachment_link.title
621860ae94abaf64ca266e5b_Top 3 Cyber Threats Responsible for Business Compromise

# data[].attributes.headline
How do cyber attackers leverage social engineering to go after a target?

# data[].attributes.subject
How do cyber attackers leverage social engineering to go after a target?

# data[].attributes.body
Appeal to emotion

Scare tactics/fraudulent threats (such as arrest)

Corrupt links

Catfishing (misleading appearance/facade)

Frantic urgency

Impersonation/imposter

# data[].attributes.headline
How to Combat Social Engineering Attacks

# data[].attributes.subject
How to Combat Social Engineering Attacks

# data[].attributes.body
Don't give the criminals info to manipulate you with:

- Be aware of wireless networks you join
- Don't trade security for convenience
- Look at settings when downloading new apps

Double check the sender's address on unrecognized emails

Research/recognize common social engineering tactics

NEVER give out personal info to someone you don't know via phone, text or email

# data[].attributes.headline
Video: Phishing Attack using Google Calendar Invites

# data[].attributes.subject
Video: Phishing Attack using Google Calendar Invites

# data[].attributes.attachment_link.title
New Scam Alert: Phishing attacks on users through google calendar events

# data[].attributes.headline
Video: $100 million Google & Facebook spear phishing Scam

# data[].attributes.subject
Video: $100 million Google & Facebook spear phishing Scam

# data[].attributes.attachment_link.readable_text
Loading...

This Course

Video Transcript

This course gives you the background needed to gain Cybersecurity skills as part of the Cybersecurity Security Analyst Professional Certificate program. You will explore incident response methodologies and security models. You will learn to recognize and categorize key types of vulnerabilities and associated attacks against today's organizations. You will explore in depth several past and recent breaches to learn how they were detected and what was done or could have been done to reduce the threat risk to the organization. Finally, you will explore the costs of data breaches through research studies and well known breaches. This course requires you to select and research a cybersecurity breach in the news today and apply your knowledge and skills from this course and previous cybersecurity courses to analyze the type of attack, attack timeline, vulnerable systems, and any missed opportunities. This project will be graded by your peers in the course. This course is intended for anyone who wants to gain a basic understanding of Cybersecurity or as the seventh and final course in a series of courses to acquire the skills to work in the Cybersecurity field as a Cybersecurity Analyst. The completion of this course also makes you eligible to earn the Cybersecurity Capstone: Breach Response Case Studies IBM digital badge. More information about the badge can be found https://www.youracclaim.com/org/ibm/badge/cybersecurity-breach-case-studies . In this course, you will learn to: ● Apply incident response methodologies. ● Research and describe a watering hole attack. ● Research and describe ransomware threats and the consequences to organization. ● Research and describe 3rd party breaches and how they affect an organization. ● Research and describe the effects of a phishing attack. ● Research and describe a point of sale attack and approximate cost of data breaches. ● Perform a case study on a current cyber attack and breach.

View Syllabus

Skills You'll Learn

security analyst, Cybersecurity, cyber attack, Computer Security Incident Management, Breach (Security Exploit)

Reviews

Filled Star Filled Star Filled Star Filled Star Filled Star

AD

Sep 2, 2021

It touches on real world cases and make attendants practice and help them how to read news about a a breach in any sources from the web. Thank you

Helpful?

EL

Jul 27, 2022

This specialization exposes all the critical aspects of Cyber Security which helps you think critically in solving real world problems

Helpful?

From the lesson

Phishing Scams

In this module, you will learn about phishing scams in detail and explore a case study of a phishing attack on two corporations.

Taught By

IBM Security Learning Services

IBM Global Subject Matter Experts

# data[].attributes.attachment_link.title
Phishing Case Study: Google & Facebook - Phishing Scams | Coursera

# data[].attributes.attachment_link.description
Loading... This Course Video Transcript This course gives you the background needed to gain Cybersecurity skills as part of the Cybersecurity Security Analyst Professional Certificate program. You will explore incident response methodologies and security models. You will learn to recognize and categorize key types of vulnerabilities and associated attacks against today's organizations.