Social Engineering Exреrt: How you’re thе Hасkеr’ѕ Greatest Tооl
Updated: Jan 12, 2019
Social engineering, in the context of information security, refers to psychological manipulation of people into performing actions or divulging confidential information.
This allows a hасkеr tо obtain infоrmаtiоn in a nоn-thrеаtеning manner.
Sосiаl еnginееring can bе uѕеd fоr реrѕоnаl gain, other thаn divulging information. All tоо оftеn in tоdау’ѕ ѕосiеtу, social еnginееring is bеing uѕеd fоr dubiоuѕ rеаѕоnѕ, so a hасkеr can obtain sensitive personal аnd/оr соmраnу infоrmаtiоn. This hаѕ nоw bесоmе a rеаl thrеаt to the ѕесuritу оf уоur еmрlоуееѕ, confidential сliеnt infоrmаtiоn аnd соmраnу rесоrdѕ аnd/оr bаnking infоrmаtiоn.
There are many ways Social Engineering can be used to gather private information without you realizing what has happened until it is too late.
1. Phishing email – the hacker will send many emails to various companies using “fake” resumes or other information that would be clicked on to open. When the user clicks to open the resume or other attachment, it releases ransomware into the system that can lock data up by infecting the computer so it becomes inaccessible and demands a Bitcoin ransom.
2. Olympic Vision – This is a fairly new way to gain access to needed information. The employee will receive an email that will appear to come from the CEO requesting private information about past and present employees resulting in private information being stolen and exposed. Other scenarios can manipulate an employee to send money to an account controlled by the hacker.
3. Business Email Compromise (BEC) – In this scenario, the hacker gains access to the employees’ company email. They then impersonate the employee who is generally an executive who has authorization to approve monetary transactions and designates others to write checks or transfer funds on their behalf.
The following tips will help avoid these serious email compromises.
Educate your employees to identify compromised email scams, be sure your bank has security for unauthorized transactions, never give out confidential information, use strong passwords and never use the same password twice.
PSeeSolutions is a Managed Service Provider in Columbus, Ohio and the surrounding areas. Our managed services platform lets us know when you are having problems before they get out of control. Managed Services alleviates this pain by letting a dedicated staff build and support your business computing environment. With a combination of hardware, software and technical expertise, PSeeSolutions can build a turn-key infrastructure for any business and manage it on an ongoing basis or simply take over management of your existing network. PSeeSolutions is also a computer repair services in Columbus, Ohio.