OK.
So what are the tools and techniques that could be used in order to executor's those decks.
Yeah.
Conduct these craft methods you have to apply those methods in order to gain advantage of human factors
and social engineering.
So there are those psychological things that Cogeco techniques I would say all these are based on the
very fundamental psychological grounds so I'm not saying and I do not certify that all these results
are true but this is the state of the science at the moment.
So there is no a.p or hypnosis here right.
So this all is scientific truth as we know it.
And there are technical means of first of all harvesting information required to conduct the tests and
the research.
Even this really handy tool social engineering tool.
There is a way behind any other tools said that could be used in order to arrange those kinds of attacks.
Yeah.
And there are some tricks and advices that I will share.
In the end and Londa to give you direction how to sharpen your social engineering skills and technical
perspective.
So let's first look around what the what is the psychology behind all this.
Yeah.
So I will try to make it really quick because there is a lot of information to cover but let's go one
by one through those influence method.
So these are what they are called.
Yeah.
So this literally are psychological principles that lead one people influence other people.
They are based on our similarities.
So people try to maintain their individual individuality but in the end we share a tremendous portion
of our DNA.
The we are from culture to culture there are differences.
The other Reymond structural differences but socially we are more or less the same.
And so we do not really differ in terms of psychological reactions to different events or actions of
others.
So yeah there are some deviations there are psychological disorders that make people
irrelevant you make people ambivalent to certain stimuli to certain events and those people are most
probably not your best social engineering target.
Yeah.
And that there are like Statistically the one sociopath per 100 people.
Yeah.
So there are chances there is 1 percent chance that you will fail in your social engineering game engagement
just because you have chosen the wrong target.
But the good thing is that sociopath's are detected with a good success rate so yeah let's go.
So first of all there is the scarcity principle.
This is this is the high value it is that that is the result of a limited amount.
So everything that's not really large an amount is valued higher in price.
This is purely psychological.
This is why platinum is has has more value than gold and gold has more wealth than silver and silver
has more value than the steel would only steel from all these has some material.
Well you know yeah.
Yeah.
So this is something based on the small amounts and our willingness to have more of something that others
don't.
OK.
And this is really working out in terms of time because the resources are limited.
Normally the time is the only resource that is in no way recoverable.
So we can not get more time in time just use and we can just spend it effectively.
Yes so the most critical resource limited in amount looks like this situation mostly artificial you're
in a business environment where you really have to hurry.
So if someone is trying to speed you up so someone is pushing you to do something really fast these
already may mean that you are being social engineer in a way maybe with a good intention but still this
is a direct use of scarcity principle.
So maybe this is in many places.
Just look around and see what happens.
Authority also this is basically I think the most important and
the strongest psychological principle in our culture we are social creatures and we are for the sake
of our social survival our delegate authority to limit the number of people so there are others that
true the rest.
So there are some people who just are entitled to be of higher authority and we will raise our children
basically and the environment that
makes this authority plausible.
Yes so we teach them to respect the people in uniform to respect the elderly and so on.
So being an authority or successfully pretending of being of authority or even being associated with
an authority figure like a an assistant or C or something is a really successful point of issuing the
social engineering and Demps of attack.
So you have to know that people value authority people comply to authority and this is the strong to
in social engineers to good liking.
So people normally like people who look or behave like them.
So this like likeness between people if you successfully demonstrate that that you were similar to a
person this person is more likely to say yes to you.
OK.
This is natural.
And there are ways to make people like you more.
Yeah artificial wasted earnings and skills that could be employed in order to raise the success rate.
Also.
You see there is some reality here.
So first of all we like someone who is like us and we are more willing to help to people who we like.
So this this works has too many meanings.
Yeah and maybe that's why we understand we behave like that or I'm just I'm just missing the cause and
effect in this relationship.
So maybe it's the other way around but whatever.
This is how things are.
This is how social engineering attacks could be performed like consistency a really important thing
to understand here is that people once they permit something in their life except something embrace
something and start acting in a certain way.
They are they have this inertia and so on.
Once you said yes to a person if they are continuing if you are if they go on asking you for a little
bit more.
Most probably will be tending to say yes to them more and more.
Again and again.
So yeah we can see that in different fraudulent activities in the streets.
And so just starting from a simple favor that is unpolite to be rejected and to have been denied certain
fraudsters or trying to involve the victims into a more and more high stakes communication.
And you just leave them without money and maybe even close here.
So let's not forget about that.
Just raising the stakes between the conversation so through or through out the single conversation based
on this consistency psychological principle we can conduct a social engineering attack so always start
from something small and then go on with extending your demand and just raising the value of the favor
you are requesting from the Dartmouth social proof.
This is basically just the acting in a way that acting in a way as everyone else acts in a situation
of incomplete information.
So every time you see something happening and demands your reaction look around to see what the others
do and behave in the same manner.
So you see that a lot of people are writing from somewhere else or they're just trying person you why
you are not going to the source of all of this behavior.
Yeah.
Who you're starting to run with them with the crowd.
This is not an instinct.
This is a social ability social skill that we have developed throughout our history so and this can
be really damaging.
So for example this bystander effect this thinking that someone else will take responsibility about
what's going on right now.
Yeah when someone is a victim of a crime or someone is suffering a health issue health crisis and no
one helps them just because they think that other people will help them.
This is also the this is also the manifestation of the social proof principle.
And this is really scary so every time you find yourself in a situation like this and then you require
immediate help.
Please do not just show it.
OK.
You have to address your request for help to a specific individual because that is that explicitly identifies
the person you are requesting to help.
And this will might resolve the issue.
But just asking for help asking for her help someone or a group of people it is not efficient.
It is it is as inefficient as large as the number of those people.
OK.
So there were cases in history when people just did not react thinking that somehow saw someone other
than them will do the job.
Reciprocation.
What it is is just giving back.
OK so if someone is approaching it with a complement or with a small gift or something this might be
this might be not a sign of attack already but this certainly is a sign of applying these reciprocation
psychological principles so you know to get something you have to create this impression that the person
owns owes you something.
Yes so give a smile to complement the good look.
In extreme cases but not on the first engagement of course give a
unintentional presence a gift.
OK.
So this all is reciprocation.
Inaction and you don't like holding the door that is not controlled by the press.
KURTZ Yes.
And then when you're holding the door to a person and letting them into the building and then going
with them side by side and the next door that requires that pass that you enter.
You may find yourself in a situation and this person that is having this bash in his best will let you
in.
OK.
This is really common.
This is reciprocation in action to.