Social engineering is the act of manipulating people psychologically so that you get what you need from
them.
We're not using any technical approaches.
We learned earlier the attack vectors can be taxing and it's the act of creating or inventing a scenario
to load the victim to participate in it.
An example can be these e-mails you get usually that an African prince suspects away and your name appears
on his will.
Please provide us with a copy of your passport on couple of bucks so that we process this further.
Some people for this trick.
Another type of vector is diversion and theft and it's actually used with courier guys or transport
companies so that you persuade them that delivery.
For example the shipment elsewhere or not necessarily with the courier guys.
For example if you're going for a bank to the boss at your money in an ATM machine and maybe some guys
will blow you that OK.
The ATM machine is currently out of order.
You can just deposit your money in this.
For example a fund related to a bank or certain kiosk related to a bank.
So it's actually diverting the attention or the actual action that needs to be performed by the victim.
Phishing is the act of sending emails that appear to come from a legitimate business or a bank or a
credit card company and it requires some kind of information on verification from the victim such that
the victim will provide information like credit card CVG number etc..
So this kind of information spear phishing is the same as phishing but it's actually targeting specific
group and the rate of success which is more than the phishing because phishing is actually targeted
towards the mass and it has a low rate of success.
But in spear phishing the attacker does more research and the attacks certain group of people so that
the probability of having a successful attack is inquest.
Dating is when you trick people in to for example you create a USP drive you guys be flash disk and
you puts a malicious file in it and you throw it in a public place such as a parking elevator walkways
and you might mark this as for example confidential or salaries of two thousand eighteen etc. So some
people will fall for that trick and they will take this risk be and just put it in their computers just
out of curiosity to see what's that.
And at this moment the computer will be infected depending on the payload as well and the Tucker might
have remote control over this computer.
Tailgating is is when the attacker.
She took it restricted area by following a person or entering BEHIND IT person who actually used his
legitimate access so that the person will have access to this area and without any kind of ID or any
kind of questions asked.
Phishing is as voice phishing.
It's where the criminal practice the use of social engineering over the telephone system to gain access
to private or personal financial information etc. what they're holding is actually the same as phishing
but in a different context.
Most of the cases people like are aware of phishing attacks and they are not ready to press on the links
of any of these emails but they are ready to press on the links on the websites they trust.
So some kind of research will be done on this aspect so that the attacker would research the web says
that I mostly visited by this user and will then check the vulnerabilities fund on this Web site to
inject these links and the user will since he's trusting the website.
He will be more inclined on pressing on these links.