Social Engineering Flashcards
What are the six types of attacker and which is most common?
Opportunists - most common
Cold intellectual attackers
State-sponsored attackers
Emotional attackers
Terrorists
Friends and relations
Describe the biggest practical threat to passwords.
Give three examples.
Phishing - attempt to acquire usernames, passwords, card details by masquerading as a trustworthy entity.
User will break system security by disclosing password to a 3rd party, accidentally or as a result of deception.
- Phishing mass emails with links to malware-infected sites.
- Emails asking customers to update their bank info.
- Attackers posing as technical support.
What is an APT?
Advanced Persistent Threat
Coordinated cyber activities of sophisticated criminals and state-level entities.
Target large organisations and foreign governments.
Not usually deployed to bring down a system but stay embedded and extract info at a slow and unreadable pace.