what is social engineering what is social engineering Phishing Attack
social engineering
see some examples of attack of social engineering.
Example 1
You may have noticed the old company's documents thrown in the trash as a dump.These documents may contain sensitive information such as names, phone numbers,Account number, social security number, address, etc. Many companies still use it When carbon paper and roll are finished in your fax machines, your carbon goes in the trashSuch sensitive data may be marked though it seems impossible, but may attackGet information for the company's container to get information easily through the waste.'
Example 2
An attacker can join a company's personnel and establish good relations with him from time to time. These relationships can be online in a social network, chat room or café store , restaurant mall etc, in the playground, or through any other means. The attacker takes the staff of the office into confidence and ultimately digs sensitive information without giving a clue.
Example 3
A social engineer can excuse the employee or a valid user or VIP by making an identity card or by explaining to the employees of the situation in the bus company. Such attackers can gain physical access to restricted areas, thus providing more opportunities for attack.
Example 4
It is in most cases that an attacker can be around you and shoulder
Surfing When you are typing sensitive information such as user ID and password, account
Pin etc.
Phishing Attack
A phishing attack is a computer-based social engineering, where an attacker has crafted a
Emails that look legitimate look similar to emails like this and feel as if they were received
From the original site, but they can be a link to fake websites if you are not smart
If enough, you will type your user id and password and will try to login as a result
In the failure and by that time, the attacker will attack you for your ID and password.
Parent Account
Quick Fix
• You should implement a good security policy in your organization and conduct the necessary
Training to give information about possible social engineering to all employees
Attacks and their results.
• Document shredding should be a mandatory activity in your company.
• Again it is sure that any link coming from your email is coming from
Authentic sources and they point to the right of websites otherwise you may end up
As a victim of phishing.
• Be professional and never share your ID and password with anybody else in any
case.
No comments:
Post a Comment