Social Engineering How social engineering attacks occurs Some ways that social engineering can occur: ○ ○ ○ Phishing Baiting Pretexting ● 62% of businesses have experienced some form of social engineering attack ● In 2020 a single data breach can cost a business over $150Million Prevention against social engineering: Training Why should we train people to avoid social engineering? 1. 2. 3. 4. 66% of all attacks are used in social engineering. Cybercriminals frequently attempt to compromise users outside the inbox, via vishing, smishing and other stoical engineering attacks. Social engineering awareness training can be simple and cost effective. Negative effect of social engineering. - Lose of users password - Confidential financial report - Disclosure of customer lists Wenbo Zhou 45782849 Phishing Phishing is the procedure of sending emails to appear from respected companies which leads individuals to reveal personal information, such as passwords and credit card numbers. How to Protect against Phishing: - - Dania Saboune 46409033 Be precautious of all communications received. If it is a phishing communication for example, links in an email message, pop-up screen and suspicious messages do NOT respond or press the link. Be cautious and recognize threats and urgent deadlines, take note of suspicious emails and browse securely. Continuously change passwords and update software! How to protect against social engineering ● There are many other forms of social engineering: ○ Pretexting ○ Baiting ○ Quid Pro Quo ○ Tailgating ● Impossible to protect from on a software level and require training: ○ ○ ○ William Hodgins 45364648 Do not believe offers which are too good to be true Lock their devices while away from them Ensure all employees have read and understand the company privacy policy
