Social Engineering Processes and Methods
In the first stage of organized attacks, the target is identified and the victim within the target is selected. After the selection process, information about the identified victim is obtained after gathering information. In light of this information, the victim's weak points and mistakes are used to access the desired data. Generally, different techniques such as fake calls and information theft are used within social engineering attacks. These techniques can be applied to specific deceptions tailored for the targeted victim, as well as to institution employees.
Types of Social Engineering
Considering the use of technologies today, we can examine the types of social engineering in two ways. These are;
- Human-Based Social Engineering: They are organized through direct communication or interaction with people. At this point, the aim is to directly obtain the desired information. It can manifest as impersonation, help, and support services.
- Computer-Based Social Engineering: In addition to direct communication with people, technologically based techniques such as computers can also be preferred. These techniques include actions like phishing emails. It also includes telephone fraud, or vishing, and malicious code and software such as fake websites.
In the social engineering process, many different deception techniques can be used, such as promotional items, gifts, and free usage rights in exchange for the information obtained from the selected victim. This method, which exploits people's mistakes and vulnerabilities to access information that needs to be kept confidential, can appear in different forms in daily life.
Damages Resulting from Social Engineering
These attacks can create significant damage by opening a secret backdoor to institutions, as well as by accessing individuals' computers. Social engineering methods, which cause material and moral damage, have harmed many national and global institutions. At this point, you can review the relevant online addresses on internet pages to protect yourself from these attacks.
