SOCIAL ENGINEERING TECHNIQUES

• Phishing: A cyber-attack uses disguised email, telephone or text message often used to steal user data including login credentials and credit card numbers.

• Pre-texting: It is an attack that focuses on creating a good pretext or a fabricated scenario to convince victims to divulge information they should not divulge.

• Scareware: It is a type of malware, that leverages on pop-up ads and social engineering tactics to manipulate online users into believing their system is infected with malware. A common scareware example is a pop-up banner appearing in your browser while surfing the web displaying such text as; “Your computer may be infected with harmful spyware programs” It either offers to install the tool for you (often malware infected), or will direct you to a malicious site where your computer becomes infected. Scareware is also distributed via emails.

• Shoulder surfing: Is a security attack where the attacker uses observation techniques to obtain personal information. It is one of the few attack methods requiring the attacker to be physically close to the victim to succeed.

These attacks are evitable and that depends on you. Here are few action to note or do to avoid falling victim of these attacks.

• Do not open emails and attachments from suspicious sources.
• Use multi-factor authentication.
• Keep your antivirus/anti-malware software updated.
• Set your spam filters to high; your email software has spam filters, check your settings and set them to high to avoid risky messages flooding your inbox.

Delete any request for personal information or passwords.