It's Cybersecurity Awareness Month. Make sure your users are briefed on these 10 attacker techniques that are often overlooked.
![A man and a woman with their heads on the keyboards of their individual laptops looking overwhelmed A man and a woman with their heads on the keyboards of their individual laptops looking overwhelmed](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltf673c9e44ff08ede/64f0d7b06d7cd0f23346644f/Slide-1-CoverArt.jpg?width=700&auto=webp&quality=80&disable=upscale)
It's the middle of National Cybersecurity Awareness Month: the perfect time to look beyond the obvious stolen passwords, phishing and malware, and into some of the social engineering attacks less known to the average end user. And here’s something you security professionals might not know: 43 percent of breaches in the last year were related to social engineering attacks, according to the Verizon Data Breach Investigations Report.
"We’re seeing a lot of social attacks, especially taking advantage of lonely guys at home," says Aaron Higbee, CTO at PhishMe. "Attackers will entice a person with a nude picture then get him to send a nude picture of himself. Then the attacker will say they will send it to Facebook unless they pay a ransom."
Christopher Hadnagy, chief human hacker at Social-Engineer adds that people should be aware that social attacks such as phone-based vishing where attackers try to steal money over the phone are becoming more prevalent.
"Criminals buy data on the Dark Web then call people saying they owe several thousands of dollars in back federal taxes from a few years ago." Hadnagy says. "Even though people may know that the IRS will only notify them in writing and will never call them directly, they still fall for it."
Based on interviews with Higbee, his colleague and chief threat scientist at PhishMe, Gary Warner, and Social-Engineer’s Hadnagy, Dark Reading has developed a list of 10 hacks that might not always be as readily apparent,
About the Author(s)
You May Also Like
Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024