What is Social Engineering
Manipulating people to gain access
Social Engineering refers to psychological manipulation techniques used to trick people into revealing confidential information or granting unauthorized access to systems.
Main Techniques
- Phishing — fake emails and websites
- Pretexting — creating false scenarios
- Baiting — offering something attractive
- Quid pro quo — service for service
- Tailgating — physical intrusion
Attack Signs
- Urgency and pressure
- Requests for confidential data
- Unusual requests from "colleagues"
- Too-good-to-be-true offers
- Threats of negative consequences
Protection Methods
- Employee training
- Request verification
- Security policies
- Multi-factor authentication
- Zero-trust culture
Attack Examples
- CEO fraud — email from "director"
- Call from "tech support"
- USB drive in parking lot
- Fake courier or contractor