Social Engineering Flashcards
Disinformation
Is a false or misleading information that is spread deliberately to deceive.
Shoulder surfing
Is covert observation (nearby remote),
Shallow fake
Alternation of media content using simple video editing software
Vishing
Pretexting and impersonation using voice
Tailgating
Unauthorized person enters a checkpoint close behind or in concert with authorized person
Watering hole
Describes the exploitation of a website or social media application that is frequently visited/used by the target
Baiting
Infiltration used by gifts, e g usb flash memory as a gift
Pretexts
Fabricated scenarios (stories) used to cover/conceal the future purpose of activity . Generally include enough truth to make them possible.
Impersonation
The act of pretending to be someone else
Smsishing
Pretexting and impersonation using txt message
Deep fake
Use of AI/Mashine learning to manipulate or generate deceptive audio content
Phishing
Pretexting and impersonation using email (casting a net)
Spear phishing
Targeting a specific group or individual to a phishing attack
Whaling
Technique of a phishing attack, targeted for high profile candidates (company CEO)
Social engineering
Is the action of exploiting human nature rather than technical hacking to gain to minds, systems data, buildings. Exploits human cognition functions: authority, trust, responsiveness, fear urgency, threat, reward, curiosity.