B 15: PEOPLE HACKING: INDICATORS OF SOCIAL ENGINEERING ATTACKS

 

INDICATORS OF SOCIAL ENGINEERING ATTACKS
In the context of social engineering, there are several indicators that can help identify potential attacks.
Here are some key aspects
Unexpected Communication:	Social engineering attacks often start with unexpected messages. The recipient is usually not expecting the message from the sender, especially not about the involved subject
Urgency:	Attackers often create a sense of urgency to make the victim act quickly without thinking. For example, an email could say, “give us your details, and you get a £500 voucher card.” If a message heightens an emotion making you rush to respond, it may be a social engineering attack
Request for Private Information:	If an unknown person asks for your private information or for you to do a task, it could be a sign of a social engineering attack
Pressure to Keep Secrets:	Attackers may pressure you to respond quickly and not tell anyone else about the communication
Fake or Suspicious Contact Information:	Attackers may use fake contact information or impersonate someone you know
Intrusive Questions:	The questions asked by an attacker can sometimes be a dead giveaway that it’s a social engineering attack. This can be either through the number of questions asked or the type of questions
Vague Identification:	A clear sign is an absence of specific and reliable information on who makes the request
Out of the Ordinary Requests:	In most cases, social engineering requests ask the potential victim to do something they have never done before
Potentially Harmful Actions:	If the requested action is performed, could it be potentially harmful to the recipient or their organization? Being asked to open documents, execute programs, send information or put in passwords, are all examples of potentially harmful actions
Suspicious Sender’s Address:	The sender’s address may imitate a legitimate business. Cybercriminals often use an email address that closely resembles one from a reputable company by altering or omitting a few characters.
By understanding these indicators, individuals and organizations can better protect themselves against social engineering attacks