Common Social Engineering Techniques

Social engineering manifests in various forms, with attackers employing tailored strategies to deceive their targets. Key techniques include:

Phishing:

Sending fraudulent emails or messages pretending to be from legitimate sources.

Example: An email claiming to be from a bank, asking the recipient to verify account details.

Pretexting:

Creating a fabricated scenario to persuade the target to share information or perform actions.

Example: Pretending to be IT support to ask for login credentials.

Baiting:

Offering something enticing, such as free downloads or physical items, to lure victims into exposing sensitive data.

Example: Leaving infected USB drives in public places, hoping someone plugs them into a device.

Tailgating/Piggybacking:

Gaining physical access to secure areas by following authorized personnel.

Example: An attacker walking closely behind an employee entering a restricted area.

Vishing (Voice Phishing):

Using phone calls to deceive victims into providing sensitive information.

Example: A caller pretending to be from tech support, claiming there’s an issue with your device.

Impersonation:

Assuming the identity of a trusted individual to gain access or information.

Example: Pretending to be a colleague or partner to request sensitive documents.

Each method relies on psychological manipulation, making awareness and training essential to counter these tactics.