CYBERSEC CCHAPTER 4

Phishing

A tactic in which an attacker attempts to obtain sensitive information from a user by posing as a trustworthy figure through email.

Impersonation

The act of pretending to be someone you are not.

Elicitation

The process of collecting or acquiring data from human beings.

Hoax

An element of social engineering in which the attacker presents a fictitious situation as real.

Baiting

A social engineering attack in which an attacker leaves physical media in a location where someone else might pick it up and use it.

URL Hijacking

A social engineering attack in which an attacker exploits the typing mistakes that users may make when attempting to navigate to a website.

Spam

An attack where the user's inbox is flooded with unsolicited messages.

Shoulder Surfing

A social engineering attack in which the attacker observes a target's behavior without the target noticing.

Tailgating

An attack where the attacker slips in through a secure area while following an authorized employee.

Piggybacking

An attack similar to tailgating, but the target knows someone is following them.

Fence Jumping

The act of surmounting a height-based physical barrier in order to gain access to a restricted area.

Dumpster Diving

The act of searching the contents of trash containers for something of value.

RFID

A standard for identifying and keeping track of objects' physical locations through the use of radio waves.

Badge Cloning

The act of copying authentication data from an RFID badge's microchip to another badge.