1.12 - Social engineering

Social Engineering

The psychological manipulation of the victim by a threat actor. Oftentimes via Empathy, trust & guilt

Pretexting

Creation of a ficitious story to encourage trust and/or guilt

Quid pro Quo

Creation of a sense of onbligation by making the victim feel they ower the attacker something

SPIM

Phishing via instant messaging

SPIT

Spam over Internet Telephony; Use of prerecorded unsolicited phone calls

Tailgaiting

Physical Social Engineering where an attacker follows an authorized user without their knowledge

Piggybacking

A threat actor tricks an authorized person into giving them access

Phishing

Email

Spear Phishing

targeted phishing attacks

Whaling

Phishing attack targeting Executives

Vishing

Voice phishing

Smishing

Phishing over SMS