Let us start with social engineering in this video, I am going to give you introduction with social
engineering and also I'm going to explain you the social engineering cycle, along with some real life
examples.
So what is social engineering?
Social engineering is simply the art of manipulating users of computer system into revealing vital or
confidential information that can be used to gain unauthorized access to a computer system into a secure
network.
That can also include other exploration activities, such as exploiting human kindness, greed and curiosity
to gain access to restricted buildings regarding the users to installing backdoor software into a secure
network.
Social engineering is one of the most dangerous and inhuman acts among humanity since its birth and
became more dangerous in this world.
With the speed and irresponsible use of the information technology, social engineers use a wide variety
of tactics to perform attacks.
The first step in most social attacks is for the attacker perform research and reconnaissance unadopted.
If the target is an enterprise, for instance, that can gather intelligence on employees structure,
internal operations commonly used within the industry and possible business partners, among other information.
One common tactic of social engineers is to focus on the behaviors and patterns of employees.
Hackers can scan the person's social media profits for information and study their behavior online and
in person.
From there, the hacker can design an attack based on information collected and exploit the weakness
uncovered during the information gathering phase.
If the attack is successful, hackers have access to sensitive data, says credit card or banking information
have made many of the targets that have gained access to protected systems or networks.
The best defense against attackers using social engineering scams is and will be always awareness.
Some examples of social engineering can be like someone calling from the bank telling you that you need
to change your bank account details because of a security reason and ask you for your personal details.
In this scenario, the person frightens.
You were telling you about hacking a security reason which makes you trade an Oscar and uses these emotional
tactics to hack you, even your trash can, give more information about you, like your immunity from
Amazon delivery box, phone, bank statements.
You're all gadget components, which includes memory devices like printers and many other things, even
simply filling a feedback form for some places because no one gives the feedback from notebook or leaflets
securely, which can contain your mobile number, email or even your home address.
The most widespread example of social engineering attack is phishing, Wikipedia, defense, phishing,
the attempt to obtain sensitive information such as usernames, passwords and credit card details directly
or indirectly, often used for malicious reasons or by disguising as a trustworthy entity in an electronic
communication.
Consider a scenario of phishing e-mail here, an employee from your organization is sending you an e-mail
saying that the cupcake stop will be in front of office this afternoon.
But can you imagine?
Why would an employee in your office tell you about the cupcakes doctrine that if he wants to tell you,
he will come to you and tell you that the cupcake truck is coming, we will head to truck and buy some
cupcakes.
So here that imply in your organization is nothing but the hacker.
And if you click on that link, all your details will be faced by the hacker.
Let's consider another scenario here.
You've received an email from your university saying that this email is mean to inform you that your
my university network password will expire in 24 hours.
But the common thing is that your password never expires.
So therefore, this email is sent to you by an hacker.
Therefore, if you click on that link, your username and your password will be searched by the hacker.
In the next lecture, we will study different types of social engineering.