Let us start with social engineering.
In this video, I am going to give you introduction of social engineering and also I'm going to explain
to you the social engineering cycle, along with some real life examples.
So what is social engineering?
Social engineering is simply the art of manipulating users of a computer system into revealing vital
or confidential information that can be used to gain unauthorized access to a computer system into a
secure network.
That can also include other exploration activities, such as exploiting human kindness, greed and curiosity
to gain access to restricted buildings regarding the users to installing backdoor software into a secure
network.
Social engineering is one of the most dangerous and inhuman acts among humanity since its birth and
became more dangerous in nowadays world.
With the speed and irresponsible use of the information technology, social engineers use a wide variety
of tactics to perform attacks.
The first step in most social attacks is for the attacker.
Perform research and reconnaissance on a target.
If the target is an enterprise, for instance, that can gather intelligence on employees structure,
internal operations commonly used within the industry and possible business partners, among other information.
One common tactic of social engineers is to focus on the behaviors and patterns of employees.
Hackers can scan the person's social media profiles for information and study their behavior online
and in person.
From there, the hacker can design an attack based on information collected and exploit the weakness
uncovered during the information gathering phase.
If the attack is successful, hackers have access to sensitive data, says credit card or banking information
have made many of the targets out of gaining access to protected systems or networks.
The best defense against attackers using social engineering scams is and will be always awareness.
Some examples of social engineering can be like someone calling from the bank, telling you that you
need to change your bank account details because of a security reason and ask you for your personal
details.
In this scenario, the person frightens.
You were telling you about hacking a security reason which makes you threatened or scared and uses this
emotional tactics to hack you, even your trash can give more information about you, like your immunity
from Amazon delivery box tone, bank statements.
You're all gadget components, which includes memory devices like printers and many other things, even
simply filling a feedback form for some places because no one gives the feedback from notebook or leaflet
securely, which can contain your mobile number, email or even your home address.
The most widespread example of social engineering attack is phishing, Wikipedia, defense, phishing.
The attempt to obtain sensitive information such as usernames, passwords and credit card details directly
or indirectly are often used for malicious reasons or by disguising as a trustworthy entity in an electronic
communication.
Consider a scenario of phishing email here.
An employee from your organization is sending you an email saying that the cupcake stop will be in front
of office this afternoon.
But can you imagine?
Why would an employee in your office tell you about the cupcake stock trick?
Other if you wants to tell you, he will just come to you and tell you that the cupcake truck is coming.
We will head to truck and buy some cupcakes.
So here that employee in your organization is nothing but the hacker.
And if you click on that link, all your details will be fetched by the hacker.
Let's consider another scenario here.
You have received an email from your university saying that this email is mean to inform you that are
my university network password will expire in 24 hours.
But the common thing is that your password never expires.
So therefore, this email is sent to you by an hacker.
Therefore, if you click on that link, your username and password will be fetched by the hacker.