Week 8 (Social Engineering)

The topic of today’s presentation is social engineering. The goal behind social engineering is to obtain all possible information which can be obtained through communication such as telephone call or simply by talking. Processes such as interview and interrogation can be used to achieve this goal of gathering information. Interview is the process of gathering information from a person with his/her own will, without any coercion, and also with agreement between the interviewer and interviewee. On the other hand, interrogation is a different method of information gathering as it is conducted against the will of the person and sometimes violence is included in the process. Other method of social engineering is called vishing (voice phishing) where this social engineering uses the voice media through phone calls.

Impersonation: pretending to be a particular person, reciprocation: exchanging favors, and influential authority: using the role of authority to get information, are methods which are used in “attacking” a certain target.

virustotal.com is a site which can be used to determine whether the url that you get is real.

 

One of the most famous figures known for social engineering is Kevin Mitnick, which spent approximately 4 years in prison for his hacking activity.

This entry was posted in Ethical Hacking and Penetration Test. Bookmark the permalink.

Comments are closed.