Social Engineering - CompTIA Network+ N10-009 - 4.2

Phishing

Social engineering with a touch of spoofing

- Often delivered by email, text, etc

- Very remarkable when well done

Something usually isn't "right"

Shoulder Surfing

• You have access to important information

- Many people want to see

- Curiosity, industrial espionage, competitive advantage

• This is surprisingly easy

- Airports / Flights

- Hallway-facing monitors

- Coffee shops

• Surf from afar

- Binoculars / Telescopes

- Easy in the big city

- Webcam monitoring

Tailgating and piggybacking

• Tailgating uses an authorized person to gain

unauthorized access to a building

- The attacker does not have consent

- Sneaks through when nobody is looking

• Piggybacking follows the same process, but the

authorized person is giving consent

- Hold the door, my hands are full of donut boxes

- Sometimes you shouldn't be polite

• Once inside, there's little to stop you

- Most security stops at the border

<>

<>