Title: Social Engineering | KnowBe4
Headings: Social Engineering
Social Engineering
Social engineering attacks include phishing, spear phishing, CEO fraud, ransomware and more. Learn about different attack methods and how you can manage this ongoing problem.
What is social engineering?
Social Engineer
Video AMA with Kevin Mitnick on all things Social Engineering
Top 10 Techniques Used By Social Engineers
Pretexting
Diversion Theft
Phishing
Spear Phishing
Water-Holing
Baiting
Quid Pro Quo
Tailgating
Honeytrap
Rogue
Did you know that 77% of successful social engineering attacks started with a phishing email?
Real-World Examples
Phishing
Spear Phishing
CEO Fraud
Social Media
How many of your users will take the bait and reply to a spoofed email?
Attacks
Email
Social Media and Internet
Trends
Criminal Groups
Attack Vectors
2020 Cybersecurity Threat Predictions
How Bad Guys Can Hijack Your Accounts
Can hackers spoof an email address of your own domain?
How can you prevent attacks?
10 Ways To Make Your Organization A Hard Target
Have your users made you an easy target for social engineering attacks?
Social Engineering Tip Sheets
On-Demand Webinars
Spotting the Gaps: Is Your Traditional Security Stack Giving You a False Sense of Security?
Improve Your Remote Employee Security During The COVID-19 Pandemic
Exposing the Dirty Little Secrets of Social Engineering
10 Incredible Ways You Can Be Hacked By Email

Content: Water-Holing
This technique takes advantage of websites people regularly visit and trust. The attacker will gather information about a targeted group of individuals to find out what those websites are, then test those websites for vulnerabilities. Over time, one or more members of the targeted group will get infected and the attacker can gain access to the secure system. Baiting
Baiting means dangling something in front of a victim so that they take action. It can be through a peer-to-peer or social networking site in the form of a (porn) movie download or it can be a USB drive labeled “Q1 Layoff Plan” left out in a public place for the victim to find. Once the device is used or malicious file is downloaded, the victim’s computer is infected allowing the criminal to take over the network. Quid Pro Quo
Latin for 'something for something', in this case it's a benefit to the victim in exchange for information. A good example is hackers pretending to be IT support. They will call everyone they can find at a company to say they have a quick fix and "you just need to disable your AV". Anyone that falls for it gets malware like ransomware installed on their machine.