Module 9: Social Engineering

Section 1: Social Engineering Concepts

Social engineering is the art of manipulating people into performing actions or divulging confidential information.

Types

• Phishing: Fraudulent emails pretending to be reputable companies
• Spear Phishing: Targeted phishing against specific individuals
• Vishing: Voice/phone-based social engineering
• Smishing: SMS/text-based social engineering
• Baiting: Offering something enticing to deliver malware
• Pretexting: Creating a fabricated scenario to gain trust
• Tailgating/Piggybacking: Following someone into restricted areas

Prevention

User awareness training, security policies, verification procedures.