Title: What is Social Engineering? 12 Prevention Tips for 2021 | UpGuard
Headings: What is Social Engineering? 12 Prevention Tips for 2021
What is Social Engineering? 12 Prevention Tips for 2021
Table of contents
Why do cybercriminals use Social Engineering?
How does Social Engineering work?
What are the six principles of influence?
1. Reciprocity
2. Commitment and consistency
3. Social proof
4. Authority
5. Liking
6. Scarcity
Examples of Social Engineering attacks
Baiting
Diversion theft
Honey trap
Phishing
Pretexting
Quid pro quo
Rogue security software
Spear phishing
Smishing
Tailgating
Vishing
Waterholing
Whaling
12 ways to prevent Social Engineering attacks
1. Educate employees
2. Establish security policies
3. Scrutinize all Information
4. Establish security protocols
5. Test attack resilience
6. Increase Test Attacks
7. Review response protocols
8. Secure all waste
9. Use Multi-Factor Authentication
10. Operations security
11. Implement a Third-Party risk management framework
12. Detect data leaks
Examples of notable Social Engineers
Kevin Mitnick
Susan Headley
Badir Brothers
Frank Abagnale
What are examples of Social Engineering attacks?
Prevent Social Engineering data breaches and data leaks with UpGuard
Learn more
Download our free ebooks and whitepapers
Tags:

Content: Diversion theft
Social engineers trick a delivery company into sending the package to a different location and intercept the mail. Honey trap
A con artist poses as an attractive person online to build up a fake online relationship to make money or gather personally identifiable information (PII) like the victim's phone number and email account. Phishing
Phishing attacks gather sensitive information like login credentials, credit card numbers, bank account details by masquerading as a trusted source. A common phishing scam is the use of email spoofing to masquerade as a trusted source like a financial institution to trick the victim into clicking a malicious link or downloading an infected attachment. Phishing emails often create a sense of urgency to make the victim feel that divulging information quickly is important. Despite being a relatively unsophisticated attack, phishing represents one of the largest cybersecurity risks. Pretexting
Pretexting is lying to gain access to personal data or other privileged information. For example, a fraudster may pose as a third-party vendor, saying they need to know your full name and title to verify your identity. Quid pro quo
A quid pro quo attack uses the human tendency of reciprocity to gain access to information. For example, an attacker may provide free technical support over a phone call to a victim and request that they turn off their anti-virus software or install a trojan that takes control of their operating system.