Social Engineering Concepts

Social Engineering Concepts

1. Social Engineering Overview

   • Art of manipulation individuals to divulge sensitive information.
   • Exploits human vulnerability, not just technical flaws.
   • Involves human-based computer based, and mobile based approaches.

2. Phases of a Social Engineering Attack

   • Investigate the Target: Compile organizational information from forums, websites, etc.
   • • Pick a Target: Determine who is vulnerable, such as angry workers.
   • Build a Connection: Win the target's trust.
   • Take advantage of the relationship by obtaining private information.

3. Types of Social Engineering

   • • Establish trust by interacting with the chosen target on a regular basis.
   • • Make the target feel at ease by using persuasive strategies like empathy or warmth.
   • Establish credibility to encourage sharing sensitive information.

4. Behaviors Vulnerable to Attacks

   • Trust
   • Urgency
   • Authority
   • Intimidation
   • Greed

5. Insider Threats

   • • Insiders who are malicious, careless, professional, or compromised.
   • Motivations:
     • monetary gain, retaliation, corporate espionage, and public declarations.
     • Examples include misusing privileged access and disclosing information to rivals.

6. Countermeasures

   • Educating Staff Members
   • Implementing strong security policies
   • Regular audits and incident response plans

7. Why Social Engineering Works

   • Relies on manipulating people's minds.
     • Cheap and easy to implement with open- source intelligence.
   • Hard to detect and lacks specific software defenses.

8. Targets of Social Engineering

   • System admin
   • Senior executives
   • Clients
   • Vendors