represents a set of techniques used by cybercriminals to lure unsuspecting users to send them their confidential data, infect their computers via malware, or open links to infected sites. In addition, hackers take advantage of a user’s lack of knowledge; thanks to the speed of technology, many consumers and employees do not realize the unconditional value of personal data and do not know how to best protect this information.

How social engineering works and how to protect yourself

Almost all attacks contain some sort of social engineering. Classic “phishing” emails and scam viruses, for example, are loaded with social nuances. Lee-phishing emails try to convince users that they actually come from legitimate sources, in hopes of getting even little personal or business data. Meanwhile, emails that contain virus-filled attachments often pretend to come from trusted contacts or offer multimedia content that looks harmless, such as “fun” or “cute” videos.

In some cases, attackers use more simplistic methods of social engineering to gain access to the network or computer. For example, a hacker might attend the public cafeteria of a large office building, while “shoulder surf” users work on their tablets or laptops. This could result in a large number of passwords and usernames, all without sending emails or writing even a line of virus code. Some attacks, on the other hand, are based on effective communication between attackers and victims; in this case, the attacker pushes the user to allow access to the network under the pretext of a serious problem that requires immediate attention. Anger, guilt and sadness are all used equally to convince users that their help is needed and cannot do without it. Finally, it is important to pay attention to social engineering as a means of confusion. Many employees and consumers don’t realize that with just a little information (name, date of birth, or address), hackers can access multiple networks, masquerading as legitimate users to IT support staff. From here, it’s easy to reset passwords and get almost unlimited access.

Protection against social engineering starts with education: Users should be instructed to never click suspicious links and always protect login credentials, even in the office or at home. However, in case social tactics are successful, the most likely outcome is a malware infection. To combat rootkits, Trojans, and other bots, it’s critical to use a high-quality Internet security solution that can both eliminate infections and trace their origin.

Other articles and links related to Social Engineering

Worm attacks

Using social engineering techniques, malware creators can prompt an unwary user to launch an infected file or open a link to an infected website. Many email worms and other types of malware use these methods.