Scribd Logo
Importer

Bienvenue sur Scribd !

  • Social Engineering

    Transféré par

    Kim Heejun
    38 vues2 pages
    Social engineering is a cyber attack technique that tricks people into unintentionally revealing private information. It works by exploiting human tendencies to be helpful or trusting. One example is when a hacker gains access to someone's email account and uses it to send malicious messages to all of their contacts. These messages may contain links or files that install malware if clicked. However, recipients may not realize the messages are fraudulent since they appear to come from a trusted friend. To prevent falling victim, it is important to be wary of unsolicited requests for information from unknown parties and to verify website URLs and file sources before interacting with them.

    Description originale:

    Copyright

    © © All Rights Reserved

    Formats disponibles

    PDF, TXT ou lisez en ligne sur Scribd

    Avez-vous trouvé ce document utile ?

    Ce contenu est-il inapproprié ?

    Signaler ce document
    Social engineering is a cyber attack technique that tricks people into unintentionally revealing private information. It works by exploiting human tendencies to be helpful or trusting. One example is when a hacker gains access to someone's email account and uses it to send malicious messages to all of their contacts. These messages may contain links or files that install malware if clicked. However, recipients may not realize the messages are fraudulent since they appear to come from a trusted friend. To prevent falling victim, it is important to be wary of unsolicited requests for information from unknown parties and to verify website URLs and file sources before interacting with them.

    Droits d'auteur :

    © All Rights Reserved
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    38 vues2 pages

    Social Engineering

    Transféré par

    Kim Heejun
    Social engineering is a cyber attack technique that tricks people into unintentionally revealing private information. It works by exploiting human tendencies to be helpful or trusting. One example is when a hacker gains access to someone's email account and uses it to send malicious messages to all of their contacts. These messages may contain links or files that install malware if clicked. However, recipients may not realize the messages are fraudulent since they appear to come from a trusted friend. To prevent falling victim, it is important to be wary of unsolicited requests for information from unknown parties and to verify website URLs and file sources before interacting with them.

    Droits d'auteur :

    © All Rights Reserved
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    sur 2

    Sooial Engineering

    AudIonoo and soopo


    1his lechnical descriplion is for everyone who have inleresl lo cyber securily.

    What Is sooIaI onQInoorInQ?

    Social engineering in securily is cyber allack
    lhal lricks people release lheir infornalion
    uninlenlionally. 1he purposes of lhese lricks
    is lo galher infornalion for fraud or access
    syslen lo users conpuler [1|. 1he social
    engineering uses peoples ignorance of
    securily lo gain access lo lheir infornalion.


    Ono oxampIo of attaok usInQ SooIaI EnQInoorInQ : EmaII to othors

    According lo Webrool, if an allacker hacks one persons enail password, lhey have access
    lo lhal persons friends lisl [2|. Hecause nosl people use only a few passwords for lhe
    nany siles lhey use, an allacker can gain access lo lhal persons social nelworking siles.
    Once lhe allacker oblains an enail accounl, lhe allacker can send enails lo all lhe
    persons friends or leave nessages on all lheir friends social pages [2|. 1he enail senl by
    an allacker nay conlain harnful nalerial for a conpuler or be a nalicious enail. However,
    lhe recipienls of lhe enail do nol realize il is an allackers enail because lhe allacker uses
    lheir friends enail address [2|.

    1he nalicious enail nay conlains danaging infornalion like a link or download. 1hrough
    lhe link allached lo lhe enail, your conpuler can be infecled. Olherwise, you also lose
    securily over your infornalion when il is collecled by lhe allacker. An allached download
    will have a sinilar funclion as a link, bul downloads can nore aclively deslroy your
    conpuler or collecl nore infornalion off of your conpuler.
    Flguro 1 : Dangor of Soolal onglnoorlng
    Even if lhe enail does nol have any links or downloads, lhe enail can slill have nalicious
    conlenl. For exanple, il nay urgenlly ask for your help for your friend or asks you lo donale
    lo lheir fundraiser lo gain your noney. And il nay require your bank address lo gain access
    lo your bank accounl [2|.


    How oan you provont from sooIaI onQInoorInQ

    1o avoid being allacked by social engineering, lhere are several prevenlalive sleps you can
    do. Firsl, you should be suspicious of phone calls, visils, or enail nessages fron slrangers
    [3|. lf soneone asks aboul your enployer or olher privale infornalion, you should be
    careful. lf an unknown person requires sone infornalion aboul your business, lry lo verify
    his or her idenlily direclly fron lhe conpany.

    Nexl is lo be careful aboul links in enails. lf you find an enail wilh link, you should nol send
    sensilive infornalion over lhe lnlernel before checking lhe links securily. 1here are nany
    fake siles lo lake your infornalion or idenlily. So you need lo pay allenlion lo lhe UHL of a
    websile [3|. Malicious websiles nay look idenlical lo legal siles, bul lhe UHL nay be a lillle
    bil differenl fron lhe original websiles donain. Finally, you should inslall and nainlain anli-
    virus soflware, firewalls, and enail fillers. 1hese efforls will help prevenl several allacks
    fron lhe inlernel.


    Hoforonoo

    [1] Sooial Engineering (seouriIy). (2014). Wikipedia [Online].
    Available: hIIp://en.wikipedia.org/wiki/Sooialengineering(seouriIy)

    [2] WhaI is Sooial Engineering? (2014) WebrooI [Online] Available:
    hllp://www.webrool.con/us/en/hone/resources/lips/online-shopping-banking/
    secure-whal-is-social-engineering

    [3] How do you avoid being a vioIin?(2013) USCEHT [Online] Available:
    hllps://www.us-cerl.gov/ncas/lips/S104-014

    [Figure 1| : hllp://www.d00ned.nel/news.hlnl//news/server/social-engineering-lhe-
    increasing-lrealh-r47

    Vous aimerez peut-être aussi