M2 Social Engineering, Camb Nats

Scamming someone into giving private/personal information to 'confirm their identity', pretending they need information to help them.

• Baiting

• Pretexting

• Quid pro quo

• Shoulder surfing

When someone promises free goods in exchange for personal information e.g. promise of a free download in return for log-in details.

• Pretexting

• Quid pro quo

• Baiting

• Phishing

When you are offered a service in exchange for personal details. Typically a cold phone call where you are told your computer has an issue and you need help from IT support.

• Baiting

• Quid pro quo

• Pretexting

• Shoulder surfing

Getting physical access to a room where you don't have access by following someone.

• Phishing

• Pretexting

• Shoulder surfing

• Tailgating / piggybacking

Stealing login information by watching someone else log in.

• Phishing

• Tailgating

• Shoulder surfing

• Quid pro quo

How could you mitigate against phishing?

• Type carefully

• Hide typing

• Not giving away login information

• Read an email very carefully before clicking any links

Social engineering is the art of manipulating or ‘conning’ individuals into giving away private information such as login IDs, passwords or bank account details, or parting with their cash

• True

• False

How can you tell this is not from Natwest bank?

• No SMTP

• Natwest dont use email

• Not FTP

• Not HTTPS

Is this email genuine?

• Yes

• No

I have been sent a funny video link via Facebook messenger from a friends email account - what might this be?

• A meme

• blagging

• phishing email

• Trojan horse virus