Social Engineering Tactics

What social engineering tactic is being used here:

An attacker pretends to be the company's CEO and provides an employee a PDF to open. The employee trusts the CEO and opens the PDF which contains malware.

• Authority

• Intimidation

• Familiarity

• Urgency

What social engineering tactic is being used here:

A secretary receives a call from an attacker claiming that their boss is about to give a presentation and the file they provided is corrupt. The attacker claims it is the secretary's fault and demands they send to the correct file.

• Authority

• Intimidation

• Familiarity

• Trust

What social engineering tactic is being used here:

A scam website posts a fake advertisement for a product on social media. They then create a swathe of authentic-looking accounts to post comments under the post claiming how wonderful the product is.

• Authority

• Trust

• Consensus

• Familiarity

What social engineering tactic is being used here:

A scam company posts on social media about a luxury car being sold cheaply. They state that only a handful of cars are available at this price.

• Intimidation

• Consensus

• Scarcity

• Trust

What social engineering tactic is being used here:

An email contains false information that the user's computer is infected with malware and that they must download a program (which unknowingly contains the malware) within 20 minutes to clear the computer and save resources.

• Urgency

• Intimidation

• Scarcity

• Consensus

What social engineering tactic is being used here:

An attacker imitates a close friend and strings the user along with genuine conversation to get to know them before asking them to download a file for them to print.

• Authority

• Intimidation

• Urgency

• Familiarity

What social engineering tactic is being used here:

A cybercriminal disguised as a security expert calls the unsuspecting victim to offer advice. When helping the victim, the 'security expert' discovers a serious error that needs immediate attention. The solution provides the cybercriminal with the opportunity to violate the victim's security.

• Trust

• Familiarity

• Urgency

• Scarcity