SOCIAL ENGINEERING FRAUD

THE DEVIL IS IN THE DETAILS

SOCIAL ENGINEERING IS …

… any action that influences a person to take an action that may

or may not be in their best interest

… the clever manipulation of the natural human tendency to trust

THE TROJAN HORSE

Genius piece of social engineering.

We named an entire class of malware after it.

You can have all the safety and security you want, but if someone uses

their charm to mislead people, it won’t help.

Philip Claes, Diamond High Council Spokesman

Has identified Social Engineering fraud

as one of the world’s emerging fraud trends.

2015 Social Engineering fraud reported losses

estimated at approx. $1 billion

SOCIAL ENGINEERING TACTICS YOUR DATA IS AT RISK EVERYDAY THROUGH SOCIAL ENGINEERING ATTACKS

WHY SOCIAL ENGINEERING ?

HACKING A HUMAN IS MUCH EASIER

THAN HACKING A BUSINESS.

ATTACKERS

PREY ON

YOUR

HUMAN

WEAKNESSES

fear

trust

sympathy greed

desire

laziness

ego

ignorance

haste

S.E. ATTACK VECTORS S.E. TACTICS

E-MAIL PHISHING

PHONE

PHYSICAL

VISHING

IMPERSONATION

What do you do to protect your organization from S.E. attacks?

DON’T BE ANOTHER STATISTIC!

SECURITY THROUGH EDUCATION

Mitigation of Social Engineering involves 3 core principles:

DEFENSIVE ACTIONS

Provide your employees guidelines for handling information and actions to

take if they become a victim, creating a security-focused culture.

REALISTIC PENTESTING

Uncover your true vulnerabilities through real-world penetration tests,

conducted by professionals who understand social-engineering.

SECURITY AWARENESS

Compliance does not protect you from social engineering.

Make training practical, interactive, and applicable.

Contact us @

office@insider.com.ro

0724 377 110

www.insider.com.ro

TRAINING MODULES:

BEHAVIOR DETECTION & ANALYSIS

INVESTIGATIVE INTERVIEWING

SOCIAL ENGINEERING

Thank you!