Real life examples of Social Engineering attacks on software engineers

📚 Quick Study Guide

• 🎣 Social Engineering: The art of manipulating people into divulging confidential information. It exploits human psychology rather than technical hacking.
• 📧 Phishing: Using deceptive emails or websites to trick individuals into revealing sensitive data like usernames, passwords, and credit card details.
• 📞 Vishing: Similar to phishing, but conducted over the phone. Attackers may impersonate IT support or other authority figures.
• 🤝 Pretexting: Creating a false scenario to convince a target to provide information they wouldn't normally share.
• 🪪 Impersonation: Assuming the identity of another person to gain access to systems or information.
• 🗑️ Dumpster Diving: Literally searching through trash for discarded documents or devices containing valuable information.
• 🔑 Tailgating: Gaining unauthorized access to a restricted area by following someone who has legitimate access.

🧪 Practice Quiz

1. Which of the following is the BEST definition of social engineering?
   1. A) Hacking into a system using brute force.
   2. B) Manipulating individuals to gain access to confidential information.
   3. C) Exploiting software vulnerabilities.
   4. D) Cracking encryption algorithms.
2. What type of social engineering attack involves deceptive emails?
   1. A) Vishing
   2. B) Phishing
   3. C) Pretexting
   4. D) Tailgating
3. An attacker calls a software engineer pretending to be IT support to get their password. This is an example of:
   1. A) Phishing
   2. B) Dumpster Diving
   3. C) Vishing
   4. D) Tailgating
4. Creating a false scenario to trick someone into giving up information is known as:
   1. A) Impersonation
   2. B) Pretexting
   3. C) Tailgating
   4. D) Phishing
5. Which social engineering technique involves physically following someone into a restricted area?
   1. A) Dumpster Diving
   2. B) Pretexting
   3. C) Tailgating
   4. D) Phishing
6. Searching through trash for sensitive information is called:
   1. A) Vishing
   2. B) Phishing
   3. C) Dumpster Diving
   4. D) Pretexting
7. An attacker pretends to be a system administrator to gain access to a server room. This is an example of:
   1. A) Pretexting
   2. B) Impersonation
   3. C) Tailgating
   4. D) Dumpster Diving