Social Engineering - Revision history

HDogan: added OSINT comparison to SOCMINT

2024-12-18T21:43:16Z

added OSINT comparison to SOCMINT

← Older revision		Revision as of 21:43, 18 December 2024
Line 113:		Line 113:
	By collecting and analyzing social media data, companies can gain valuable insights into the perceptions and behaviors of their customers and target audience. This can inform marketing strategies, customer service efforts, and product development. For example, a company might use social media intelligence to identify common customer pain points and develop solutions to address them, or to identify influencers to partner with in order to promote their brand.		By collecting and analyzing social media data, companies can gain valuable insights into the perceptions and behaviors of their customers and target audience. This can inform marketing strategies, customer service efforts, and product development. For example, a company might use social media intelligence to identify common customer pain points and develop solutions to address them, or to identify influencers to partner with in order to promote their brand.

	There are a number of tools and platforms available to help companies automate the process of gathering and analyzing social media data. These tools often include features such as keyword tracking, sentiment analysis, and competitor analysis.		OSINT (Open-Source Intelligence) on the contrary focuses on collecting information that is freely available from public sources, such as news articles, research papers and online databases.

			There are a number of tools and platforms available to help companies automate the process of gathering and analyzing social media data. These tools often include features such as keyword tracking, sentiment analysis, and competitor analysis. Examples would be Facebook Search Engine and Twitter Advanced Search. Some OSINT tools can also be used for social media. (Maltego, Sherlock, Social-Searcher,...)

	Overall, social media intelligence can be an important part of a company's market research and customer insights efforts, helping them to better understand and connect with their audience on social media. It can also be a useful way for companies to stay up-to-date on industry developments and emerging trends, and to identify opportunities for growth and innovation.		Overall, social media intelligence can be an important part of a company's market research and customer insights efforts, helping them to better understand and connect with their audience on social media. It can also be a useful way for companies to stay up-to-date on industry developments and emerging trends, and to identify opportunities for growth and innovation.

HDogan: Merged missing info from "Social Engineering & Phishing Platform"

2024-12-18T17:41:56Z

Merged missing info from "Social Engineering & Phishing Platform"

← Older revision		Revision as of 17:41, 18 December 2024
Line 38:		Line 38:
	* Interactive voice-response phishing: Interactive voice response system is used.		* Interactive voice-response phishing: Interactive voice response system is used.
	* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.		* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.
			* Scareware: Scareware exploits the tendency to act rashly when someone feels threatened. By staging a threat and offering a solution to unsuspecting victims. This can be done in the form of emails, pop-ups, or SMS that lead to malware or fake websites collecting sensitive information.

	=== Pharming ===		=== Pharming ===
Line 50:		Line 51:
	=== Ransomware ===		=== Ransomware ===
	[[Ransomware]] is a type of malicious software that encrypts a victim's personal data and demands a ransom from the victim to restore access to the data. These attacks have been increasing in popularity and are becoming more and more difficult to stop. Some well-known examples of [[Ransomware]] include WannaCry (2017) and Locky (2016). One of the dangers of ransomware is that even if the victim pays the ransom, there is no guarantee that they will actually get their data back.		[[Ransomware]] is a type of malicious software that encrypts a victim's personal data and demands a ransom from the victim to restore access to the data. These attacks have been increasing in popularity and are becoming more and more difficult to stop. Some well-known examples of [[Ransomware]] include WannaCry (2017) and Locky (2016). One of the dangers of ransomware is that even if the victim pays the ransom, there is no guarantee that they will actually get their data back.

			=== Shoulder Surfing ===
			Secretly observing confidential information, such as passwords or PINs, by watching individuals operate devices.

	=== Dumpster Diving ===		=== Dumpster Diving ===
Line 68:		Line 72:
	=== Impersonating ===		=== Impersonating ===
	Impersonating is the act of pretending to be someone else, either in person or online, in order to deceive others. This can be done for a variety of reasons, such as to gain access to sensitive information or resources, to evade detection or consequences, or to commit a crime. In the digital world, impersonation is often done through the use of fake profiles or websites that mimic legitimate ones in order to trick people into divulging personal information or money. In person, impersonation can be more complex and may involve the use of props, costumes, and other means of disguising one's true identity.		Impersonating is the act of pretending to be someone else, either in person or online, in order to deceive others. This can be done for a variety of reasons, such as to gain access to sensitive information or resources, to evade detection or consequences, or to commit a crime. In the digital world, impersonation is often done through the use of fake profiles or websites that mimic legitimate ones in order to trick people into divulging personal information or money. In person, impersonation can be more complex and may involve the use of props, costumes, and other means of disguising one's true identity.

			===Psychological Attacks===
			;Reciprocity:
			: Offering favors to create a sense of obligation to reciprocate.
			;Obligation:
			: Evoking a feeling of duty or cooperation to comply with requests.
			;Free Information:
			: Extracting seemingly harmless information through casual conversation.
			;Authority:
			: Exploiting the perceived authority of figures to compel compliance.
			;Desire to Help:
			: Faking distress to evoke sympathy and manipulate individuals into offering assistance.

	== Prevention ==		== Prevention ==

PKraubner: /* Pharming */

2024-03-04T18:45:16Z

Pharming

← Older revision		Revision as of 18:45, 4 March 2024
Line 40:		Line 40:

	=== Pharming ===		=== Pharming ===
	This approach is similar to the goal of Phishing but is done quite differently. The task is to lure the ~~vicitm~~ on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. The domain of the website is completely legit. If the website is done very well your data is being saved and afterwards you are getting redirect onto your real bank account on the real website without you ever knowing.		This approach is similar to the goal of Phishing but is done quite differently. The task is to lure the victim on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. The domain of the website is completely legit. If the website is done very well your data is being saved and afterwards you are getting redirect onto your real bank account on the real website without you ever knowing.

	=== Pretexting ===		=== Pretexting ===

PKraubner: /* Pharming */

2024-03-04T18:44:13Z

Pharming

← Older revision		Revision as of 18:44, 4 March 2024
Line 40:		Line 40:

	=== Pharming ===		=== Pharming ===
	This approach is similar to the goal of ~~Pishing~~ but is done quite differently. The task is to lure the vicitm on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. The domain of the website is completely legit. If the website is done very well your data is being saved and afterwards you are getting redirect onto your real bank account on the real website without you ever knowing.		This approach is similar to the goal of Phishing but is done quite differently. The task is to lure the vicitm on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. The domain of the website is completely legit. If the website is done very well your data is being saved and afterwards you are getting redirect onto your real bank account on the real website without you ever knowing.

	=== Pretexting ===		=== Pretexting ===

PKraubner: rearranged Pharming after Phishing, typo fix

2024-03-04T18:43:53Z

rearranged Pharming after Phishing, typo fix

← Older revision		Revision as of 18:43, 4 March 2024
Line 39:		Line 39:
	* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.		* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.

			=== Pharming ===
			This approach is similar to the goal of Pishing but is done quite differently. The task is to lure the vicitm on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. The domain of the website is completely legit. If the website is done very well your data is being saved and afterwards you are getting redirect onto your real bank account on the real website without you ever knowing.

	=== Pretexting ===		=== Pretexting ===
	This attack is similar to Phishing but the goal of this attack is to make you believe that you are being contacted by someone close or authoritative. These messages could lead you to send personal information to the attacker. If done right and other conversation were being ~~caputred~~ before and the phone number or E-Mail got spoofed you sometimes would not even realize that it is a fake.		This attack is similar to Phishing but the goal of this attack is to make you believe that you are being contacted by someone close or authoritative. These messages could lead you to send personal information to the attacker. If done right and other conversation were being captured before and the phone number or E-Mail got spoofed you sometimes would not even realize that it is a fake.

	=== Tailgaiting ===		=== Tailgaiting ===
Line 54:		Line 56:
	=== Pop-Up Window ===		=== Pop-Up Window ===
	Pop-Up Windows are often used to scare non enlightened people to get tricked by a simple window mostly in a browser. This scam either wants you to redeem the jackpot you just won or tell you that you computer is infected and you should call the attacker to infect you with malware. Most of the times these windows are hard to close and are pretty loud to intimiated the victim.		Pop-Up Windows are often used to scare non enlightened people to get tricked by a simple window mostly in a browser. This scam either wants you to redeem the jackpot you just won or tell you that you computer is infected and you should call the attacker to infect you with malware. Most of the times these windows are hard to close and are pretty loud to intimiated the victim.

	~~=== Pharming ===~~
	This approach is similar to the goal of Pishing but is done quite differently. The task is to lure the vicitm on to a similar looking website e.g. bank, insurance, ... but it is not done with sending you fake links but rather hacking the DNS Server and redirecting you instantly without you even knowing. If the website is done very well your data is being apprehend and afterwards you are getting redirect onto your real bank account without you ever knowing.

	=== Baiting/USB Drop ===		=== Baiting/USB Drop ===

PKraubner at 18:41, 4 March 2024

2024-03-04T18:41:13Z

← Older revision		Revision as of 18:41, 4 March 2024
Line 34:		Line 34:
	* Spear phishing: Are attacks on specific people or groups, for this you need to know about the person/company beforehand. Since it is very personal, it is also often very successful in contrast to other Social Engineering approaches.		* Spear phishing: Are attacks on specific people or groups, for this you need to know about the person/company beforehand. Since it is very personal, it is also often very successful in contrast to other Social Engineering approaches.
	* Whaling: Similar to spear-phishing, except that high-profile individuals are targeted.		* Whaling: Similar to spear-phishing, except that high-profile individuals are targeted.
	* Vishing:These phishing attacks are carried out over the phone.		* Vishing: These phishing attacks are carried out over the phone.
	* Smishing: The attacks are carried out over text messages.		* Smishing: The attacks are carried out over text messages.
	* Interactive voice-response phishing: Interactive voice response system is used.		* Interactive voice-response phishing: Interactive voice response system is used.
	* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.		* Business email compromise phishing: : It is similar to whaling, the attacker wants access to business mails and then sends legitimate looking business mails to get ”normal” employees to click some link or something.


	=== Pretexting ===		=== Pretexting ===

PKraubner: typo

2024-03-04T18:29:18Z

typo

← Older revision		Revision as of 18:29, 4 March 2024
Line 12:		Line 12:


	[[~~File:~~File:01_mitnicks_attack_circle.png\|thumb\|none\|300px\|Source: Mouton, Social		[[File:01_mitnicks_attack_circle.png\|thumb\|none\|300px\|Source: Mouton, Social
	engineering attack framework]]		engineering attack framework]]

PKraubner: checked references, some typo fixes, added picture of attack cycle, added some more information and references

2024-03-04T18:28:54Z

checked references, some typo fixes, added picture of attack cycle, added some more information and references

← Older revision		Revision as of 18:28, 4 March 2024
Line 10:		Line 10:
	=== Phases ===		=== Phases ===
	In Social Engineering there are a few necessary steps to complete an attack and gain the information you are after. Kevin Mitnick has divided the process into 4 steps with are mainly: '''Information Gathering''', '''Hook Relationship''', '''Exploitation and Execution''' and '''End without leaving a trace'''.		In Social Engineering there are a few necessary steps to complete an attack and gain the information you are after. Kevin Mitnick has divided the process into 4 steps with are mainly: '''Information Gathering''', '''Hook Relationship''', '''Exploitation and Execution''' and '''End without leaving a trace'''.


			[[File:File:01_mitnicks_attack_circle.png\|thumb\|none\|300px\|Source: Mouton, Social
			engineering attack framework]]

	==== Information Gathering ====		==== Information Gathering ====
Line 28:		Line 32:
	=== Phishing ===		=== Phishing ===
	Phishing Attacks are one of the most common attacks. They are pretty simple and based on for example a real E-Mail that is being copied and used to get user data with links redirecting to a wrong website. This website looks than pretty similar to the original and if you do not look close enough you sometimes do not even realize that it is fake. The goal of this attack is in general to steal password from accounts and then try to steal money in any way possible. There are different types of phishing:		Phishing Attacks are one of the most common attacks. They are pretty simple and based on for example a real E-Mail that is being copied and used to get user data with links redirecting to a wrong website. This website looks than pretty similar to the original and if you do not look close enough you sometimes do not even realize that it is fake. The goal of this attack is in general to steal password from accounts and then try to steal money in any way possible. There are different types of phishing:
	* Spear ~~phising~~: Are attacks on specific people or groups, for this you need to know about the person/company beforehand. Since it is very personal, it is also often very successful in contrast to other Social Engineering approaches.		* Spear phishing: Are attacks on specific people or groups, for this you need to know about the person/company beforehand. Since it is very personal, it is also often very successful in contrast to other Social Engineering approaches.
	* Whaling: Similar to spear-phishing, except that high-profile individuals are targeted.		* Whaling: Similar to spear-phishing, except that high-profile individuals are targeted.
	* Vishing:These phishing attacks are carried out over the phone.		* Vishing:These phishing attacks are carried out over the phone.
Line 42:		Line 46:

	=== Ransomware ===		=== Ransomware ===
	[[Ransomware]] is a type of malicious software that encrypts a victim's personal data and demands a ransom from the victim to restore access to the data. These attacks have been increasing in popularity and are becoming more and more difficult to stop. Some well-known examples of [[Ransomware]] include WannaCry and Locky. One of the dangers of ransomware is that even if the victim pays the ransom, there is no guarantee that they will actually get their data back.		[[Ransomware]] is a type of malicious software that encrypts a victim's personal data and demands a ransom from the victim to restore access to the data. These attacks have been increasing in popularity and are becoming more and more difficult to stop. Some well-known examples of [[Ransomware]] include WannaCry (2017) and Locky (2016). One of the dangers of ransomware is that even if the victim pays the ransom, there is no guarantee that they will actually get their data back.

	=== Dumpster Diving ===		=== Dumpster Diving ===
Line 103:		Line 107:
	* https://www.mdpi.com/1999-5903/11/4/89		* https://www.mdpi.com/1999-5903/11/4/89
	* https://www.researchgate.net/profile/Hugo-Barbosa/publication/315351300_SOCIAL_ENGINEERING_AND_CYBER_SECURITY/links/599c43430f7e9b892bafc0df/SOCIAL-ENGINEERING-AND-CYBER-SECURITY.pdf		* https://www.researchgate.net/profile/Hugo-Barbosa/publication/315351300_SOCIAL_ENGINEERING_AND_CYBER_SECURITY/links/599c43430f7e9b892bafc0df/SOCIAL-ENGINEERING-AND-CYBER-SECURITY.pdf
			* https://cybernews.com/cyber-war/influencing-anonymous-experiment/
			*

	[[Category:Documentation]]		[[Category:Documentation]]

MWerkl at 15:32, 8 January 2023

2023-01-08T15:32:54Z

@@ Line 86: / Line 86: @@
 * Check Programs: [https://www.virustotal.com/ Virustotal]
 * Password Manager: [https://keepassxc.org/ KeepassXC]
 == References ==

MWerkl at 15:27, 8 January 2023

2023-01-08T15:27:12Z

Show changes