Social Engineering in Cybersecurity by https://padlet.com/prka6783/cyfwc9xr5go002ui Covers the basics of social engineering en-us 2022-03-02 22:45:37 UTC 2022-03-03 22:25:27 UTC hello@padlet.com https://padlet.net/icons/png/1f3d9.png What is Social Engineering? prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520261 Social engineering is the broad term for the art of psychological manipulation to trick users into give up confidential information.]]> 2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520261 Tailgating prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520262
  • Happens in the real world
  • Involves a person tagging along with a legitimate employee of an organization who is authorized to enter a restricted area.
  • Can even be physically dangerous
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520262     Real-World Examples of Social Engineering prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520263
  • Loyola Sees an Increase in Phishing Scams
  • Citibank Phishing Baits Customers With Fake-Suspension Alerts
  • Social engineering Used During Cyberattack on Axis
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520263     Most Common Forms of Social Engineering prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520264
  • Phishing
  • Impersonation
  • Baiting
  • Quid Pro Quo
  • Piggybacking (or Tailgating)
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520264     How to Avoid Becoming a Victim prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520265
  • Slow down. If the message conveys a sense of urgency or uses high-pressure sales tactics be skeptical.
  • Research the facts. Be suspicious of any unsolicited messages, especially if there are grammatical errors. Use a search engine to go to the real company’s site.
  • Don't click on unknown links. If a link provided to you looks suspicious, use a search engine to find out what the site is.
  • Have strong passwords. Email hijacking is rampant. Hackers, spammers, and social engineers taking over control of people’s email accounts to send links to your contacts
  • Beware of what you download. If you don’t know the sender or the website, then do not download it.
  • Offers of money or sweepstakes are fake. If you receive an email saying you won a lottery or sweepstakes, it is guaranteed to be a scam. It is designed to take your money
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520265     Phishing prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520267
  • One of the most common forms of social engineering attacks
  • Are scams through email and text messages that is aimed at creating a sense of urgency, curiosity or fear in victims.
  • Attackers then prod victims into revealing sensitive information, clicking on links to malicious websites, or opening attachments that contain malware.
  • Vishing uses voice communication to entice a victim into divulging sensitive information
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520267     Common Indicators of Social Engineering prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520271
  • Suspicious email addresses
  • Generic greetings such as “Dear Valued Customer”
  • Spoofed hyperlinks and websites
  • Suspicious attachments
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520271     Overview of Attacks prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520273
  • Social engineering attacks happen in several steps
  • First, the perpetrator investigates the intended victim to gather necessary background information
  • Then, the attacker moves to gain the victim’s trust
  • Finally, with this trust, the perpetrator tries to garner as much personal information as possible
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520273     More Information prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520274
  • Social Engineering Attacks
  • Social engineering in cybersecurity: Springer
  • What is Social Engineering?
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520274     More Tips to Avoid Becoming a Victim prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520276
  • Be suspicious of unsolicited phone calls or email messages.
  • Never provide information about your organization unless it is to an authorized person.
  • Do not reveal personal or financial information in an email
  • Pay attention to the URL of a website. Look for URLs that begin with "https" rather than "http."
  • If you receive a sketchy email from a company, contact them directly instead of replying to the email.
  • Enable multi-factor authentication whenever possible.
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520276     Baiting prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520277
  • Related to phishing
  • Attacker dangles and entices the victim with an exciting offer such as a free download
  • Often found on Peer-to-Peer sites 
  • Victims may be infected with malicious software
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520277     Quid Pro Quo prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520278
  • Like baiting, a Quid Pro Quo lures users.
  • However, this usually takes form of a service. 
  • If a customer needs help with their device, instead of fixing the problem the attacker installs malware on the victim’s computer.
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520278     Video Examples of Social Engineering prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520280
  • How easy is it to commit a phishing attack?
  • Examples of Phishing Attacks
  • High-profile hacks were part of a 'coordinated social engineering attack'
    • ]]>     2022-03-02 22:45:37 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2074520280     Whaling prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2076328976
  • Type of Phishing that targets senior employees. Massive impact on a company's cybersecurity.
  • By targeting the high-value member of an organization, the hacker is likely to gain access to the entire company information
  • They will also have the ability to impersonate the most legitimate members of the company.
    • ]]>     2022-03-03 17:38:41 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2076328976     How Does Social Engineering Connect to the Technical Aspects of Cybersecurity? prka6783 https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2076750793
  • Social engineers seek to exploit human weaknesses 
  • Social engineering gets large amounts of sensitive information about people, network, and devices 
  • They also more attack channels due to social media sites, mobile communication, and wearable devices.
  • Forms of social engineering can also mimic the code used by legitimate websites, making it seem real.
    • ]]>     2022-03-03 22:22:16 UTC https://padlet.com/prka6783/cyfwc9xr5go002ui/wish/2076750793