4.1 Social Engineering

Why do we get caught by social engineering?

• We are too stupid

• We are too trusting

• We can't learn about it

What is this an example of?

• Phishing

• Pharming

• Baiting

• Pretexting

Scamming someone into giving private/personal information to 'confirm their identity', pretending they need information to help them.

• Baiting

• Pretexting

• Quid pro quo

• Shoulder surfing

When someone promises free goods in exchange for personal information e.g. promise of a free download in return for log-in details.

• Pretexting

• Quid pro quo

• Baiting

• Phishing

When you are offered a service in exchange for personal details. Typically a cold phone call where you are told your computer has an issue and you need help from IT support.

• Baiting

• Quid pro quo

• Pretexting

• Shoulder surfing

Getting physical access to a room where you don't have access by following someone.

• Phishing

• Pretexting

• Shoulder surfing

• Tailgating / piggybacking

Which technique uses emails or texts containing a link to a fake website to then steal your security or login details?

• Phishing

• Pharming

• Baiting

• Pretexting

Stealing login information by watching someone else log in.

• Phishing

• Tailgating

• Shoulder surfing

• Quid pro quo

Which of these social engineering techniques is in the specification

• Vishing

• Smishing

• Phishing

• Spear phishing

How could you prevent shoulder surfing?

• Better password

• Hiding typing

• Checking website

• Bolting down the computer