Social Engineering Penetration Testing Services

This is a form of cyber social engineering very similar to phishing, except that the emails are targeted at specific individuals. Attackers research the receiver and know who this individual views as trusted email sources. They could even mimic the victim’s personal emails and trick them into clicking on malicious links or attachments.

This is a recently popularised form of cyber security social engineering that uses malware such as rogue anti-spyware, anti-malware, scanners or scareware to deceive users. The hackers use rogue security software to mislead users into believing they can help them remove malware at a fee.

Pretext social engineering attacks involve an attacker impersonating someone in a powerful position. They could pretend to be company managers, auditors, members of the IRS or police officers. Since scammers demand information under the pretext of authority, victims are more likely to provide it.

Baiting is a way of luring victims by offering them something or piquing their interest. An example is a free download using social media engineering or even a USB drive with a provocative label. Once you download the file or use the infected device, malware is installed on your computer, giving access to the hacker.