10 Social Engineering Attacks Your End Users Need to Know About
It's Cybersecurity Awareness Month. Make sure your users are briefed on these 10 attacker techniques that are often overlooked.
![A man and a woman with their heads on the keyboards of their individual laptops looking overwhelmed A man and a woman with their heads on the keyboards of their individual laptops looking overwhelmed](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltf673c9e44ff08ede/64f0d7b06d7cd0f23346644f/Slide-1-CoverArt.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
It's the middle of National Cybersecurity Awareness Month: the perfect time to look beyond the obvious stolen passwords, phishing and malware, and into some of the social engineering attacks less known to the average end user. And here’s something you security professionals might not know: 43 percent of breaches in the last year were related to social engineering attacks, according to the Verizon Data Breach Investigations Report.
"We’re seeing a lot of social attacks, especially taking advantage of lonely guys at home," says Aaron Higbee, CTO at PhishMe. "Attackers will entice a person with a nude picture then get him to send a nude picture of himself. Then the attacker will say they will send it to Facebook unless they pay a ransom."
Christopher Hadnagy, chief human hacker at Social-Engineer adds that people should be aware that social attacks such as phone-based vishing where attackers try to steal money over the phone are becoming more prevalent.
"Criminals buy data on the Dark Web then call people saying they owe several thousands of dollars in back federal taxes from a few years ago." Hadnagy says. "Even though people may know that the IRS will only notify them in writing and will never call them directly, they still fall for it."
Based on interviews with Higbee, his colleague and chief threat scientist at PhishMe, Gary Warner, and Social-Engineer’s Hadnagy, Dark Reading has developed a list of 10 hacks that might not always be as readily apparent,
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024