Please enable JavaScript.
Coggle requires JavaScript to display documents.
Social Engineering on Organisations, IT Support Personnel, …
Social Engineering on Organisations
Targets
Mediums
Employees
Executives (Whaling)
Third-Party Vendors
IT Support Personnel
General Public
Email (Phishing)
Phone (Vishing)
In-Person (Tailgating)
Social Media (Baiting)
Physical Media (USB Drives)
Text Messages (Smishing)
Compliance of Principle
Commitment
Social Proof
Liking
Scarcity
Reciprocity
Authority
GOAL
Access to Sensitive Information.
Unauthorized System Access
Financial Gain
Data Exfiltration.
Spreading Malware or Ransomware
Compromise Organizational Integrity.
Creating Backdoor Access
Espionage. Manipulating Human Trust.
Privilege Escalation.
Attack Phases
Information Gathering
Establishing a Relationship
Exploitation
Execution
IT Support Personnel
Employees
Executives (Whaling)
Third-Party Vendors
General Public