<\/p>\n\n\n\n
Social Engineering Techniques<\/span><\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" Social Engineering Techniques Phishing Phishing attacks are the practice of sending fraudulent communications that appear to come from a reputable source….<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-52","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/52","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=52"}],"version-history":[{"count":2,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions"}],"predecessor-version":[{"id":57,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/52\/revisions\/57"}],"wp:attachment":[{"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=52"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=52"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/justatrainingblog.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=52"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Phishing<\/td> Phishing<\/em> attacks are the practice of sending fraudulent communications that appear to come from a reputable source.<\/td><\/tr> Typo-Squatting<\/td> Using domains with very similar names as legitimate ones to capitalise on spelling mistakes<\/td><\/tr> Pretexting<\/td> A phishing attempt with a fabricated ‘pretext’ for why you should do what they say
(e.g. we’re calling from Visa, someone has been using your card, for verification give us your account number…)<\/td><\/tr>Pharming<\/td> Directing users to malicious websites through no interaction of their own. Could be caused by malware re-directing requests, client vulnerabilities and Poisoned DNS<\/td><\/tr> Vishing<\/td> Phishing over phone or voicemail<\/td><\/tr> Smishing<\/td> Phishing over SMS<\/td><\/tr> Spear Phishing<\/td> Email or electronic communications scam targeted towards a specific individual, organisation or business<\/td><\/tr> Whaling<\/td> Spear Phishing but targeted at high value targets (e.g. CEOs)<\/td><\/tr> Impersonation <\/td> When an attacker pretends to be something they aren’t and is often tailored based on reconnaissance<\/td><\/tr> Hoaxing<\/td> Phishing based on a non-existent threat<\/td><\/tr> Watering Hole Attack<\/td> Infiltrating a 3rd party which is commonly accessed by the target<\/td><\/tr> SPIM<\/td> Spam over Instant Messaging<\/td><\/tr> rDNS<\/td> Registered DNS – Blocks emails if senders domain doesn’t match IP address<\/td><\/tr> Tarpitting<\/td> Intentionally slows internal mail server when an abnormal email is detected. This in turn slows the attackers mail server acting as a deterrent. <\/td><\/tr> Recipient Filtering<\/td> Rejecting all emails not addressed to a valid recipient email address<\/td><\/tr> Influence Campaign<\/td> Attempts to sway public opinion<\/td><\/tr> Tailgating<\/td> Following people into secure access areas piggybacking off their access<\/td><\/tr> Invoice Scan<\/td> Sending legitimate looking invoice to trick company into sending money or harvesting bank details.<\/td><\/tr> Credential Harvesting<\/td> Password harvesting. Often done via a Macro to harvest saved passwords.<\/td><\/tr><\/tbody><\/table> Common ways to detect phishing?<\/td> – Incorrect URLs
– Grammar Inconsistencies
– Images instead of text<\/td><\/tr>What is commonly done to increase success changes in Smishing\/Vishing?<\/td> – Spoofing telephone number<\/td><\/tr> What increases the chances of Phishing succeeding?<\/td> – Reconnaissance <\/td><\/tr> Where is information for reconnaissance commonly gathered?<\/td> – Lead generation sites
– Social Media
– Corporate Websites<\/td><\/tr>What happens after the reconnaissance stage of a Phishing Attack?<\/td> – Attacker uses gathered information to build a believable pretext<\/td><\/tr> What common information is used in a phishing pretext after reconnaissance?<\/td> 1. Where you work
2. Where you bank
3. Recent financial transactions
4. Family & Friends<\/td><\/tr>What are common impersonation ploys<\/td> 1. Tech Support
2. Government
3. Banks
4. Higher ranks in organisation<\/td><\/tr>What is a common hoaxing method?<\/td> Threat for example unpaid tax which needs to be paid immediately in Giftcards otherwise they’ll be arrested.<\/td><\/tr> How do you prevent watering hole attacks?<\/td> 1. Defence-in-depth
2. Firewalls \/ IPS
3. Anti-virus & Anti-malware updates<\/td><\/tr>Where do you commonly receive spam?<\/td> 1. Email
2. Text
3. Forums<\/td><\/tr>What are the four organisational impacts of SPAM?<\/td> 1. Security Concerns
2. Resource utilisation
3. Storage Costs
4. Managing spam<\/td><\/tr>What are the two common types of SPAM?<\/td> 1. Phishing
2. Advertising<\/td><\/tr>Where is SPAM typically blocked?<\/td> 1. Firewall
2. Cloud Spam Filter<\/td><\/tr>How can you prevent SPAM?<\/td> – Allowed list which only allows emails from trusted senders
– SMTP Standard checking
– Registered DNS (rDNS)
– Tarpitting
– Recipient Filtering<\/td><\/tr>How does an Invoice Scam Work?<\/td> Uses spear phishing to gather info.
Based on reconnaissance results generates a legitimate looking invoice which is paid as it’s a trusted company.<\/td><\/tr>Who is the usual culprit of influence campaigns?<\/td> Nation-state actors<\/td><\/tr> What are the principles of Social Engineering?<\/td> 1. Authority
2. Intimidation
3. Consensus
4. Scarcity
5. Urgency
6. Familiarity
7. Trust<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n