What is Social Engineering?
Techniques Used in Social Engineering
Social engineering attacks can take many forms, but some common techniques include:
- Phishing: Phishing emails or messages disguised as legitimate sources (e.g., banks, credit card companies) trick victims into clicking malicious links or downloading attachments that compromise their devices or steal passwords.
- Pretexting: Attackers create a false scenario or impersonate a trusted entity (e.g., IT support, manager) to gain the victim’s trust and elicit sensitive information.
- Baiting: Attackers lure victims with tempting offers or urgent requests, often involving free gifts, prizes or critical security issues, to manipulate them into taking unsafe actions.
- Quid pro quo: Attackers offer seemingly helpful services in exchange for access or information. This could involve fake technical support or promises of unlocking features in exchange for login credentials.
- Tailgating: Attackers gain physical access to secure areas by following closely behind authorised personnel.
Impact of social engineering
Social engineering attacks can have severe consequences, including:
- Data breaches: By tricking victims into revealing passwords or clicking malicious links, attackers can gain access to sensitive data like financial information, intellectual property or personal records.
- Financial loss: Social engineering can lead to financial losses through fraudulent transactions, unauthorised money transfers or ransomware attacks.
- System disruption: Gaining unauthorised access to systems can disrupt operations, cause data loss, or even compromise entire networks.
- Reputational damage: Social engineering attacks can damage an organisation’s reputation, especially if sensitive data is compromised or leaked publicly.
