Social Engineering and Online Safety

Social Engineering

• Social engineering is the art of manipulating, influencing, or deceiving individuals into taking actions that aren't in their best interest or the best interest of their organization.
• Hackers use social engineering to penetrate networks, despite strong defensive tools, by exploiting human psychology rather than system vulnerabilities.

Spotting Red Flags

• Verify the sender's email address, as cybercriminals can spoof emails to appear from genuine sources or people you know or trust.
• Check if the "reply to" address matches the "from" address.
• Be cautious of emails received outside of business hours or with suspicious timing.
• Be wary of emails that evoke emotions, such as fear, curiosity, or urgency.

Avoiding Traps

• Don't take action if an email gives you an uncomfortable feeling or seems illogical.
• Don't click on links or download attachments from unknown or suspicious sources.
• Hover your mouse over hyperlinks to see the actual URL before clicking.
• Be cautious of requests to update or act on something to avoid negative consequences, as this is a common tactic used by cybercriminals to gain access to sensitive information.

Social Engineering

• Social engineering is the manipulation or deception of individuals to act against their or their organization's best interests.
• Hackers use social engineering to exploit human psychology, bypassing strong defensive tools, to penetrate networks.

Spotting Red Flags

• Verify the sender's email address to avoid spoofed emails from cybercriminals.
• Check that the "reply to" address matches the "from" address to ensure authenticity.
• Be cautious of emails received outside of business hours or at suspicious times.
• Be wary of emails evoking emotions like fear, curiosity, or urgency, as they may be phishing attempts.

Avoiding Traps

• Trust your instincts: don't take action if an email feels off or seems illogical.
• Avoid clicking on links or downloading attachments from unknown or suspicious sources.
• Hover over hyperlinks to see the actual URL before clicking to avoid malicious sites.
• Be cautious of requests to update or act on something to avoid negative consequences, as this is a common cybercriminal tactic to gain access to sensitive information.