Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Latest Comment: Google's new See No Evil policy......
The State of Cybersecurity Incident ResponseIn this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Tweet This
0 Comments
User Rank: Apprentice
11/14/2018 | 11:03:38 AM
Common social engineering techniques involve posing as an employee of Microsoft or Google and convincing a finance employee to install remote access software on their computer, which then allows the hacker free reign into the companies network and perhaps its finance controls.
There are straight forward training techniques that all companies should implement to avoid these common social engineering campaigns. Just like a consumer, when you receive a call from a contact claiming to be your bank, your credit card company, or a critical software vendor, always take their full name and contact number and tell them you will call them back. Then, try to contact them via the company's listed 800 number, or known support line. If they are legitimate, the employee will be right back on the phone with them. If the initial call was a scam, the scam will have been averted AND the vendor will be made aware of a new threat using their identity.