Phishing - cyberattack in which attackers attempt to trick individuals into revealing sensitive information, such as passwords, credit card numbers, or personal details, by pretending to be a trustworthy entity. This is often done via emails or messages that mimic legitimate organizations, with links directing victims to fake websites., vishing - voice phishing") involves attackers using phone calls to deceive victims into sharing confidential information. The attacker often pretends to be a representative of a trusted organization, such as a bank or government agency, and uses social engineering techniques to manipulate the victim., shoulder surfing  - Shoulder surfing is a form of physical spying where an attacker observes someone entering sensitive information, such as passwords or PINs, by watching over their shoulder. This can happen in public places, like ATMs, or when using computers or smartphones., whaling - highly targeted form of phishing that focuses on high-profile individuals, such as executives or senior managers within an organization. The goal is often to steal sensitive information or gain access to company systems. Whaling attacks typically use well-researched and personalized approaches to exploit their targets., Tailgating - following someone to enter secured door, impersonation - when an attacker pretends to be someone else—such as an employee, IT support staff, or vendor—to manipulate someone into revealing sensitive information, granting access, or performing a specific action. This can happen via phone, email, or in person., dumpster diving - searching through physical trash or discarded items to retrieve sensitive information, such as documents containing passwords, confidential files, or personal information. Proper disposal methods, like shredding, are used to mitigate this threat., evil twin - type of Wi-Fi attack where an attacker sets up a rogue wireless access point that mimics a legitimate network. Unsuspecting users connect to the fake network, allowing the attacker to intercept sensitive data like login credentials or other transmitted information.,

Social engineering

Print
Embed

Leaderboard

Visual style

Options

Switch template

Continue editing: ?