WHAT IS SOCIAL ENGINEERING?
Social Engineering is the task of obtaining detailed information of employees in the private sector and companies through Open-Source Intelligence, Human Intelligence, and psychosocial methods.
Open-source Intelligence is the process of collecting personal information about a subject or person by searching it online, forums, or public records.
Human Intelligence is a process of collecting personal information by looking at features, language, behavior, location, clothing and more.
This information is then used to exploit and compromise the credentials of organizations and individuals, primarily for the benefit of the attacker financially or personally.
WHY MEMBERSHIP IS USED?
The process of Social Engineering is to gather more information about an individual or organization. Once this information has been compiled, the attacker will try to rob the person of sensitive information. Generally, personal information will be used to access online accounts, passwords, and access to secure workplaces.
Unfortunately, many companies forget that the first step in “fraud” any organization starts with a person, first.
In fact:
• More than 60% of businesses are targeted by Social Engineering each year
• Only about 25% of companies provide social engineering awareness training
• More than 90% of online attacks are based on social engineering
• Social Engineering attacks cost companies between $3 and $6 billion each year (worldwide)
• The average cost of each attack is estimated at $130,000
• 45% of employees open suspicious emails, 60% become new employers
THE MOST COMMON ATTACKS WILL SOCIETY TECHNIQUES?
Pretexting - The act of concealing a name, function, or purpose in order to gain access to or protect information.
Spear Phishing - Attacks, usually email, targeted at specific recipients and include detailed information
Vising - The crime of stealing sensitive information is a phone-based attack used to obtain sensitive information, or for the victim to take action.
SMS Sensitive Theft - An attack that starts with a text message to get sensitive information from recipients.
QUID PRO QUO / BAITING - Especially online, this attack promises the victim rewards or services in exchange for personal information.
HOW TO PROTECT YOURSELF IN THE WORLD OF LIFE.
There are many ways to combat the onslaught of Social Engineering. Or I can admit that you will never be “very safe”, unfortunately, it can be a headache. This is especially true if you are trying to balance the power of Customer Service with potential or existing customers.
Therefore, write down the most common, but most effective, ways to get the most out of your personal and company information.
BE A WOMAN - I hope, if our highest Intelligence Agency can be robbed by people all over the world, you can do the same. In fact, no one is 100% safe. The big difference between you and government agencies is that they do not work well. As they say, "without seeing, without mind". This is the best prevention advice you can take when fighting future invaders. You can take small steps by removing the identifiable information from your social media accounts; Birthday, place of employment, city of residence, etc. Most importantly, BE VERY DISAPPOINTED by people or accounts requesting your personal information. As soon as they have a small piece of your personal information, everything else becomes a “pull line”.
SAFETY PHOTOS - Most companies have pre-existing security policies in place. However, skilled Social Engineers understand how they violate these "common safety measures". To understand that people are the first line of access to a Social Work Engineer, it is important to equip them with basic language analysis training. Second, remember that "humility kills". Comfort with guests, conversations, open doors, and open computers can all be a big problem for a company. Maybe your company chooses not to need ID badges or scanning technology. Not worried. While it may be helpful to use technology to protect your property, it is not necessary. You can start by keeping all the doors secure at all times, while putting all the traffic in one gate. While adding qualified hospitality staff to this route, you can prevent 90% of all burglary, and unauthorized burglary access.
ENVIRONMENTAL INVESTIGATION - A rare and important source of any business employs an outside company, Pen Inspector. Pen inspectors are specialists of Social Engineer Consultants who assess the company's security risks. This process includes an Open-source Intelligence survey of the company and its employees, a company security check, and a personal evaluation of their access to the site with the voluntary assistance of each employee. Recruitment Entry Inspectors can prevent future community suits, significant financial losses, and strengthen the organization's physical / digital security.
All in all, there is no perfect way to understand or prevent in Social Engineering. Each person and company are different from the following. Moreover, the attack on Social Engineering always turns into the best, most dangerous path.
However, if you stick to the “basics” about security and targeted threats, you will always have one step ahead of a preventable attack.
You must be logged in to post a comment.