Social Engineering new.pptx
•Download as PPTX, PDF•
0 likes•1,895 views
Social engineering is manipulating people into taking actions that may not be in their best interest. Hackers use social engineering because it is less resistant than other attacks and more successful. Common goals are money, ego, revenge, or knowledge. Typical attacks involve posing as customer service, deliveries, tech support, etc. Social engineering methods include dumpster diving, shoulder surfing, baiting, vishing, phishing, and whaling. Dumpster diving involves searching trash for useful information. Shoulder surfing means watching people enter passwords. Baiting uses enticing offers to infect systems with malware. Phishing fools people via email into revealing sensitive info or installing malware. Vishing and smishing are phone- and text-
Report
Share
Report
Share
Recommended
Social engineering
Social engineering involves manipulating people into revealing confidential information through psychological tricks, deception or pretending to need access for legitimate reasons. Attackers use methods like pretexting, phishing and fake websites to obtain personally identifiable data, financial information, passwords and other sensitive details from targets like employees or customers. The impacts of social engineering can be significant, as demonstrated by a $80 million cyberattack on Bangladesh's central bank. To protect against social engineering, organizations should promote security awareness training to help people identify inappropriate requests and understand the risks of revealing private information.
Presentation of Social Engineering - The Art of Human Hacking
Nowadays if you want to hack a corporation or damage a personal "enemy" fast, Social Engineering techniques work every time and more often than not it works the first time. Within the presentation you will be able to learn what social engineering is, types of social engineering and related threats.
Social engineering
This document discusses social engineering and its threats. Social engineering refers to manipulating people into performing actions or divulging confidential information. It is a significant threat because existing computer security technologies do not protect against human vulnerabilities. Common social engineering attacks include phishing emails, vishing phone calls, leaving infected USB drives in parking lots, and impersonating maintenance workers. The document demonstrates real examples of vishing attacks and provides tips for preventing social engineering, such as verifying identities of people requesting information. However, it notes that fully preventing social engineering attacks can be difficult due to human factors.
Social Engineering,social engeineering techniques,social engineering protecti...
Social Engineering,social engineering techniques,social engineering protection techniques,stages of social engineering ,effect on organizations
Social Engineering Basics
Do you know what social engineering is? Do you know how to protect yourself from attacks? Learn the basics so you can protect your business!
Social engineering attacks
This document discusses social engineering techniques used by attackers to trick people into divulging sensitive information or performing actions. It defines key terms and explains why social engineering is a threat even for organizations with strong technical security controls. Common social engineering attack methods are described in detail, including phishing emails, phone calls, dropping infected USB drives, and impersonation. The document emphasizes that education is needed to help people recognize and avoid social engineering tactics.
Social engineering hacking attack
Learn what is social engineering attack. It includes the social engineering techniques like shoulder surfing, eavesdropping, baiting, Tailgating, phishing, spear phishing and pretexting.
Social engineering
This document discusses social engineering and why organizations should use it. Social engineering involves using psychological manipulation to trick people into revealing confidential information. It works because people are inherently lazy, want to help, and are curious. The document outlines common social engineering techniques like phishing, impersonation, and physical security compromises. It recommends that organizations conduct social engineering assessments of their own employees to identify vulnerabilities and provide ongoing training. Regular social engineering tests can help educate employees and strengthen an organization's security over time.
Recommended
Social engineering
Social engineering involves manipulating people into revealing confidential information through psychological tricks, deception or pretending to need access for legitimate reasons. Attackers use methods like pretexting, phishing and fake websites to obtain personally identifiable data, financial information, passwords and other sensitive details from targets like employees or customers. The impacts of social engineering can be significant, as demonstrated by a $80 million cyberattack on Bangladesh's central bank. To protect against social engineering, organizations should promote security awareness training to help people identify inappropriate requests and understand the risks of revealing private information.
Presentation of Social Engineering - The Art of Human Hacking
Nowadays if you want to hack a corporation or damage a personal "enemy" fast, Social Engineering techniques work every time and more often than not it works the first time. Within the presentation you will be able to learn what social engineering is, types of social engineering and related threats.
Social engineering
This document discusses social engineering and its threats. Social engineering refers to manipulating people into performing actions or divulging confidential information. It is a significant threat because existing computer security technologies do not protect against human vulnerabilities. Common social engineering attacks include phishing emails, vishing phone calls, leaving infected USB drives in parking lots, and impersonating maintenance workers. The document demonstrates real examples of vishing attacks and provides tips for preventing social engineering, such as verifying identities of people requesting information. However, it notes that fully preventing social engineering attacks can be difficult due to human factors.
Social Engineering,social engeineering techniques,social engineering protecti...
Social Engineering,social engineering techniques,social engineering protection techniques,stages of social engineering ,effect on organizations
Social Engineering Basics
Do you know what social engineering is? Do you know how to protect yourself from attacks? Learn the basics so you can protect your business!
Social engineering attacks
This document discusses social engineering techniques used by attackers to trick people into divulging sensitive information or performing actions. It defines key terms and explains why social engineering is a threat even for organizations with strong technical security controls. Common social engineering attack methods are described in detail, including phishing emails, phone calls, dropping infected USB drives, and impersonation. The document emphasizes that education is needed to help people recognize and avoid social engineering tactics.
Social engineering hacking attack
Learn what is social engineering attack. It includes the social engineering techniques like shoulder surfing, eavesdropping, baiting, Tailgating, phishing, spear phishing and pretexting.
Social engineering
This document discusses social engineering and why organizations should use it. Social engineering involves using psychological manipulation to trick people into revealing confidential information. It works because people are inherently lazy, want to help, and are curious. The document outlines common social engineering techniques like phishing, impersonation, and physical security compromises. It recommends that organizations conduct social engineering assessments of their own employees to identify vulnerabilities and provide ongoing training. Regular social engineering tests can help educate employees and strengthen an organization's security over time.
Social Engineering - Are You Protecting Your Data Enough?
Social engineering involves deceiving people into providing private information through manipulation. Common social engineering attacks include phishing scams by email or phone that try to steal login credentials. Other methods are shoulder surfing to see passwords, dumpster diving to find sensitive trash, and tailgating to access restricted areas. Social engineering works because people are inclined to trust authority, follow social proof, reciprocate kindness, and make decisions based on scarcity and distractions. Protecting against social engineering requires vigilance, secure disposal of documents, awareness of manipulation tactics, and escalating any suspicious requests for information.
Social engineering
Social engineering is a form of hacking that exploits human trust and helpfulness. It is done through impersonation, phone calls, email, or in-person interactions to obtain sensitive information. Anyone can be a target if the social engineer can build rapport and trust. Common techniques include pretending to need technical help, claiming to be from the same organization, or creating a sense of urgency or fear in the target. Education and strict security policies are needed to combat social engineering threats.
Social engineering-Attack of the Human Behavior
Social engineering exploits human behavior and trust to gain access to sensitive information. It includes technical attacks like phishing emails and pop-up windows, as well as non-technical attacks like dumpster diving. Common human behaviors exploited include curiosity, fear, and thoughtlessness. To help mitigate social engineering risks, organizations should educate employees, implement security policies, conduct audits, and use technical defenses like email filters and firewalls. Regular awareness training can help motivate employees to follow best practices.
Social engineering presentation
Social engineering is a type of attack that manipulates people into revealing sensitive information or performing actions that violate security policies. It works by exploiting human trust and the natural tendency to help others. Attackers first gather information about targets, then develop relationships to gain trust before exploiting that trust to obtain access or steal information. Common social engineering techniques include phishing emails and calls where attackers pretend to be from technical support. While no system can fully prevent social engineering, organizations can minimize risks by educating users and restricting what sensitive information users provide over the phone or to unknown parties.
Social Engineering Attacks & Principles
This document provides an overview of social engineering attacks. It defines social engineering as manipulating people into giving up confidential information through deception and manipulation. Various social engineering principles are described, including authority, social proof, urgency, and scarcity, which attackers use to carry out successful attacks. Different types of social engineering attacks are also outlined, such as phishing, spear phishing, baiting, DNS spoofing, honey traps, tailgating, shoulder surfing, and impersonation attacks.
Social Engineering
This document discusses social engineering techniques used to manipulate people into revealing sensitive information or performing actions. It defines social engineering as manipulating people to get them to do what you want. Common techniques include pretending to need help, building trust, and creating a sense of urgency. The document also outlines various human-based and computer-based social engineering methods, such as impersonation, phishing emails, and using popup windows. It notes that the best defenses include shredding documents, security policies and procedures, user awareness training, and keeping systems updated.
The Art of Human Hacking : Social Engineering
Companies are generally very good at protecting themselves against external attacks, but only rarely do they guard themselves against internal attacks. By using what’s known as ‘Social Engineering’, hackers exploit unsuspecting people who in good faith open up their doors to unwanted strangers.
Social engineering, or SE, is the art of manipulating people into performing actions or so they give up confidential information. Social Engineering can mean different things to different people.
Social Engineering
This document discusses social engineering techniques used to manipulate people into revealing confidential information or performing actions. It defines social engineering, provides examples of common techniques like dumpster diving and phishing, and notes that the C-suite employees with access to sensitive information but less security training are most vulnerable targets. The document also outlines the typical cycle of an attack, from information gathering to developing relationships to exploiting trust to execute the final action. It concludes that prevention is difficult but organizations can control risks through security policies, education, incident response planning, and fostering a security-conscious culture.
Cyber attacks
Slides on Cyber Security:Overview of cyber attacks
how attacks occurs and how to prevent helps IIIrd year students to learn about cyber security
Social engineering
Social engineering is the use of deception to manipulate people into divulging confidential information. It relies on human tendencies to trust others and takes advantage of "the weak link" in security - users. There are two categories of social engineering attacks: technology-based approaches that deceive users into thinking they are interacting with real systems, and non-technical approaches using deception alone. Common tactics include phishing emails, phone calls (vishing), pretending to be technical support, and observing users (shoulder surfing). Organizations can help prevent social engineering by having security policies, training employees, and monitoring compliance.
PPT on Phishing
This document discusses phishing, which is an attempt to acquire personal information like usernames, passwords, and credit card details under false pretenses. It covers common phishing techniques like link manipulation and website forgery. It also discusses types of phishing like deceptive, malware-based, and DNS-based phishing. The document outlines causes of phishing like misleading emails and lack of user awareness. It proposes both technical and social approaches to anti-phishing and examines the effects of phishing like identity theft and financial loss. Finally, it recommends defenses like education and detection tools to counter phishing attacks.
Social Engineering
Social engineering relies on human interaction and manipulation to gain access or information through psychological attacks. It works by exploiting human weaknesses like insecurity, authority, urgency or familiarity. There are physical techniques like impersonation or tailgating and digital methods like phishing emails, spam, hoaxes or hijacking common website misspellings to trick users into giving away access or sensitive information. Social engineering is an ongoing tactic that requires constant vigilance against evolving methods of deception targeting human vulnerabilities.
Cyber security
This document discusses cyber security. It begins by defining cyber security as the body of technologies, processes, and practices designed to protect networks, devices, programs, and data from attacks, damage, or unauthorized access. It notes that cyber security is important because organizations collect, store, and process unprecedented amounts of data that needs protection. Some common cyber threats discussed include cyberterrorism, cyberwarfare, cyberspionage, and attacks targeting critical infrastructure, networks, applications, cloud systems, and internet of things devices. The document also examines cyber attack life cycles and common prevention methods.
Cyber Security Awareness Program.pptx
This document provides an overview of cyber security topics and best practices. It discusses basics of information security, standards like ISO 27001, and how to harden operating systems. It covers password security, securing USB devices, email security, ransomware prevention, safe browsing, social media security, and mobile device security. Key advice includes using strong and unique passwords, encrypting USB drives, backing up data, updating software, and avoiding public Wi-Fi. The document also discusses cyber threats, types of hackers, and security incidents from the past as examples.
Introduction to Social engineering | Techniques of Social engineering
This slide features Social Introduction to Social engineering, its Techniques, and some Saftey measures.
What is Social Engineering? An illustrated presentation.
Social engineering relies profoundly on human interaction and often involves the misleading of employees into violating their organization’s security procedures. Humans are naturally helpful, but when it comes to protecting an organization’s security, being helpful to an outsider can do more harm than good.
These slides discuss social engineering, the most common attack methods, and the best means for defending against a social engineering attack.
For more helpful cyber security blog articles, visit www.integritysrc.com/blog.
Cyber security awareness presentation nepal
This document is a summary of a webinar on cyber security and digital safety. It discusses various types of hackers, defines cyber crimes, and covers topics like social media security, mental health and cyber security, and how to protect websites from hacking. It provides scopes in the cyber security field and lists some dedicated cyber security companies in Nepal. The webinar aims to educate normal users on filing the cyber space safely.
Social engineering
Social engineering is manipulating people into revealing sensitive information or performing actions, rather than using technical hacking methods. It involves gaining people's trust and obtaining information that seems harmless but can be combined to compromise security. Famous social engineer Kevin Mitnick used only social engineering to access private networks. Common social engineering attacks include phishing scams, impersonating help desk staff, stealing documents, and installing malware under false pretenses. The weakest link is often human rather than technical, as people are more vulnerable to manipulation. Training employees, testing defenses with ethical hackers, and verifying unsolicited contacts can help prevent social engineering attacks.
PHISHING PROTECTION
Looking at the different components an organisation should consider to fight Phishing attacks and build a successful Phishing protection program
Social Engineering | #ARMSec2015
Social Engineering as the Art of "Human OS" hacking
Main points of the presentation (1) Overall introduction on social engineering (2) Case studies (3) Defending against Social Engineering.
for: http://armsec.org/
- Social Engineering Unit- II Part- I.pdf
This document discusses social engineering cyberattacks and how to prevent them, especially during COVID-19. It begins by defining social engineering and explaining how it relies on manipulating human psychology using fear, greed, curiosity, helpfulness, and urgency. Various social engineering attack types are described, including phishing and business email compromise scams. Technical defenses that can help prevent social engineering attacks are then outlined, such as multi-factor authentication, email filtering gateways, email banners, and outbound traffic filtering using firewalls and proxies.
More Related Content
What's hot
Social Engineering - Are You Protecting Your Data Enough?
Social engineering involves deceiving people into providing private information through manipulation. Common social engineering attacks include phishing scams by email or phone that try to steal login credentials. Other methods are shoulder surfing to see passwords, dumpster diving to find sensitive trash, and tailgating to access restricted areas. Social engineering works because people are inclined to trust authority, follow social proof, reciprocate kindness, and make decisions based on scarcity and distractions. Protecting against social engineering requires vigilance, secure disposal of documents, awareness of manipulation tactics, and escalating any suspicious requests for information.
Social engineering
Social engineering is a form of hacking that exploits human trust and helpfulness. It is done through impersonation, phone calls, email, or in-person interactions to obtain sensitive information. Anyone can be a target if the social engineer can build rapport and trust. Common techniques include pretending to need technical help, claiming to be from the same organization, or creating a sense of urgency or fear in the target. Education and strict security policies are needed to combat social engineering threats.
Social engineering-Attack of the Human Behavior
Social engineering exploits human behavior and trust to gain access to sensitive information. It includes technical attacks like phishing emails and pop-up windows, as well as non-technical attacks like dumpster diving. Common human behaviors exploited include curiosity, fear, and thoughtlessness. To help mitigate social engineering risks, organizations should educate employees, implement security policies, conduct audits, and use technical defenses like email filters and firewalls. Regular awareness training can help motivate employees to follow best practices.
Social engineering presentation
Social engineering is a type of attack that manipulates people into revealing sensitive information or performing actions that violate security policies. It works by exploiting human trust and the natural tendency to help others. Attackers first gather information about targets, then develop relationships to gain trust before exploiting that trust to obtain access or steal information. Common social engineering techniques include phishing emails and calls where attackers pretend to be from technical support. While no system can fully prevent social engineering, organizations can minimize risks by educating users and restricting what sensitive information users provide over the phone or to unknown parties.
Social Engineering Attacks & Principles
This document provides an overview of social engineering attacks. It defines social engineering as manipulating people into giving up confidential information through deception and manipulation. Various social engineering principles are described, including authority, social proof, urgency, and scarcity, which attackers use to carry out successful attacks. Different types of social engineering attacks are also outlined, such as phishing, spear phishing, baiting, DNS spoofing, honey traps, tailgating, shoulder surfing, and impersonation attacks.
Social Engineering
This document discusses social engineering techniques used to manipulate people into revealing sensitive information or performing actions. It defines social engineering as manipulating people to get them to do what you want. Common techniques include pretending to need help, building trust, and creating a sense of urgency. The document also outlines various human-based and computer-based social engineering methods, such as impersonation, phishing emails, and using popup windows. It notes that the best defenses include shredding documents, security policies and procedures, user awareness training, and keeping systems updated.
The Art of Human Hacking : Social Engineering
Companies are generally very good at protecting themselves against external attacks, but only rarely do they guard themselves against internal attacks. By using what’s known as ‘Social Engineering’, hackers exploit unsuspecting people who in good faith open up their doors to unwanted strangers.
Social engineering, or SE, is the art of manipulating people into performing actions or so they give up confidential information. Social Engineering can mean different things to different people.
Social Engineering
This document discusses social engineering techniques used to manipulate people into revealing confidential information or performing actions. It defines social engineering, provides examples of common techniques like dumpster diving and phishing, and notes that the C-suite employees with access to sensitive information but less security training are most vulnerable targets. The document also outlines the typical cycle of an attack, from information gathering to developing relationships to exploiting trust to execute the final action. It concludes that prevention is difficult but organizations can control risks through security policies, education, incident response planning, and fostering a security-conscious culture.
Cyber attacks
Slides on Cyber Security:Overview of cyber attacks
how attacks occurs and how to prevent helps IIIrd year students to learn about cyber security
Social engineering
Social engineering is the use of deception to manipulate people into divulging confidential information. It relies on human tendencies to trust others and takes advantage of "the weak link" in security - users. There are two categories of social engineering attacks: technology-based approaches that deceive users into thinking they are interacting with real systems, and non-technical approaches using deception alone. Common tactics include phishing emails, phone calls (vishing), pretending to be technical support, and observing users (shoulder surfing). Organizations can help prevent social engineering by having security policies, training employees, and monitoring compliance.
PPT on Phishing
This document discusses phishing, which is an attempt to acquire personal information like usernames, passwords, and credit card details under false pretenses. It covers common phishing techniques like link manipulation and website forgery. It also discusses types of phishing like deceptive, malware-based, and DNS-based phishing. The document outlines causes of phishing like misleading emails and lack of user awareness. It proposes both technical and social approaches to anti-phishing and examines the effects of phishing like identity theft and financial loss. Finally, it recommends defenses like education and detection tools to counter phishing attacks.
Social Engineering
Social engineering relies on human interaction and manipulation to gain access or information through psychological attacks. It works by exploiting human weaknesses like insecurity, authority, urgency or familiarity. There are physical techniques like impersonation or tailgating and digital methods like phishing emails, spam, hoaxes or hijacking common website misspellings to trick users into giving away access or sensitive information. Social engineering is an ongoing tactic that requires constant vigilance against evolving methods of deception targeting human vulnerabilities.
Cyber security
This document discusses cyber security. It begins by defining cyber security as the body of technologies, processes, and practices designed to protect networks, devices, programs, and data from attacks, damage, or unauthorized access. It notes that cyber security is important because organizations collect, store, and process unprecedented amounts of data that needs protection. Some common cyber threats discussed include cyberterrorism, cyberwarfare, cyberspionage, and attacks targeting critical infrastructure, networks, applications, cloud systems, and internet of things devices. The document also examines cyber attack life cycles and common prevention methods.
Cyber Security Awareness Program.pptx
This document provides an overview of cyber security topics and best practices. It discusses basics of information security, standards like ISO 27001, and how to harden operating systems. It covers password security, securing USB devices, email security, ransomware prevention, safe browsing, social media security, and mobile device security. Key advice includes using strong and unique passwords, encrypting USB drives, backing up data, updating software, and avoiding public Wi-Fi. The document also discusses cyber threats, types of hackers, and security incidents from the past as examples.
Introduction to Social engineering | Techniques of Social engineering
This slide features Social Introduction to Social engineering, its Techniques, and some Saftey measures.
What is Social Engineering? An illustrated presentation.
Social engineering relies profoundly on human interaction and often involves the misleading of employees into violating their organization’s security procedures. Humans are naturally helpful, but when it comes to protecting an organization’s security, being helpful to an outsider can do more harm than good.
These slides discuss social engineering, the most common attack methods, and the best means for defending against a social engineering attack.
For more helpful cyber security blog articles, visit www.integritysrc.com/blog.
Cyber security awareness presentation nepal
This document is a summary of a webinar on cyber security and digital safety. It discusses various types of hackers, defines cyber crimes, and covers topics like social media security, mental health and cyber security, and how to protect websites from hacking. It provides scopes in the cyber security field and lists some dedicated cyber security companies in Nepal. The webinar aims to educate normal users on filing the cyber space safely.
Social engineering
Social engineering is manipulating people into revealing sensitive information or performing actions, rather than using technical hacking methods. It involves gaining people's trust and obtaining information that seems harmless but can be combined to compromise security. Famous social engineer Kevin Mitnick used only social engineering to access private networks. Common social engineering attacks include phishing scams, impersonating help desk staff, stealing documents, and installing malware under false pretenses. The weakest link is often human rather than technical, as people are more vulnerable to manipulation. Training employees, testing defenses with ethical hackers, and verifying unsolicited contacts can help prevent social engineering attacks.
PHISHING PROTECTION
Looking at the different components an organisation should consider to fight Phishing attacks and build a successful Phishing protection program
Social Engineering | #ARMSec2015
Social Engineering as the Art of "Human OS" hacking
Main points of the presentation (1) Overall introduction on social engineering (2) Case studies (3) Defending against Social Engineering.
for: http://armsec.org/
What's hot (20)
Social Engineering - Are You Protecting Your Data Enough?
Social Engineering - Are You Protecting Your Data Enough?
Introduction to Social engineering | Techniques of Social engineering
Introduction to Social engineering | Techniques of Social engineering
What is Social Engineering? An illustrated presentation.
What is Social Engineering? An illustrated presentation.
Similar to Social Engineering new.pptx
- Social Engineering Unit- II Part- I.pdf
This document discusses social engineering cyberattacks and how to prevent them, especially during COVID-19. It begins by defining social engineering and explaining how it relies on manipulating human psychology using fear, greed, curiosity, helpfulness, and urgency. Various social engineering attack types are described, including phishing and business email compromise scams. Technical defenses that can help prevent social engineering attacks are then outlined, such as multi-factor authentication, email filtering gateways, email banners, and outbound traffic filtering using firewalls and proxies.
PACE-IT, Security+3.3: Summary of Social Engineering Attacks
CompTIA exam study guide presentations by instructor Brian Ferrill, PACE-IT (Progressive, Accelerated Certifications for Employment in Information Technology)
Social Engineering.pdf
Social engineering is a technique used by attackers to manipulate people into revealing confidential information through deception; it is effective because human behavior is vulnerable and there are no complete defenses against social engineering attacks. Common social engineering techniques include impersonation, pretexting, phishing emails and websites, baiting, and exploiting trust to obtain login credentials, financial details, and other sensitive data from targets. Social engineers use methods like researching targets, developing relationships, and exploiting those relationships to gather sensitive account and financial information from organizations.
The Insider Threat January.pptx
This document discusses insider threat trends and programs. It outlines different types of insiders like unintentional, exploited, external insiders, and malicious insiders. It discusses common motives for insider threats like money, ideology, coercion, ego, and disgruntlement. Potential risk indicators for insider threat activities are listed like attempting to bypass security or expressing conflicting loyalties. Case studies of insiders exhibiting concerning behaviors are presented anonymously. Common times for insider data theft are outlined as within 30 days of leaving a company. Methods for detecting and mitigating insider threats through training, monitoring, and reporting programs are listed.
Unit iii: Common Hacking Techniques
offline credential stealing, phishing, malware, pharming, online credential stealing, spyware, worms, trojans.
Counterintelligence & The Insider Threat January 2019 (1).pptx
This document discusses counterintelligence and the insider threat. It begins with an overview of counterintelligence and its goal of identifying and mitigating intelligence threats. It then examines trends in insider threat cases, including common motives like money, ideology, coercion, and ego. Various types of insiders are identified, such as unintentional, exploited, external, and malicious insiders. Potential indicators of insider threat risk are described, including concerning behaviors and activities. A case study examines an individual who exhibited many warning signs and was later discovered to have leaked classified information. The document concludes with an overview of mitigation strategies an organization can employ to counter various methods of operation exploited by foreign intelligence services.
Social engineering
Social engineering is manipulating people into revealing confidential information through deception rather than technical hacking methods. It includes techniques like quid pro quo, phishing, baiting, pretexting, and diversion theft. Famous social engineer Kevin Mitnick emphasized that people inherently want to be helpful and trustworthy, making them vulnerable. Training and policies can help prevent social engineering by raising awareness of common tactics and restricting disclosure of private information. The human element remains the weakest link despite strong technical security defenses.
Conference about Social Engineering (by Wh0s)
This document provides an overview of social engineering techniques. It defines social engineering as manipulating people into performing actions or divulging confidential information. Common social engineering techniques discussed include shoulder surfing, impersonation, phishing, reverse social engineering, and dumpster diving. Reasons why people are vulnerable to social engineering include wanting to help others and disliking saying no. Famous social engineers like Kevin Mitnick and Christopher Hadnagy are profiled for their exploits. The document concludes that a lack of common sense and information is what makes social engineering successful.
What is social engineering.pdf
What is social engineering?
In the digital age, criminals have found new ways to steal valuable information from individuals and organizations. One of the most effective tactics they use is social engineering. Social engineering is the act of manipulating people into divulging confidential information or performing actions that are not in their best interests. In this article, we will explore what social engineering is, how it works, and how you can protect yourself from it.
Understanding Social Engineering
Types of Social Engineering
Social engineering can take many forms, from phishing emails to pretexting phone calls. The most common types of social engineering attacks include:
Phishing
Phishing attacks are one of the most common social engineering tactics. In a phishing attack, a criminal will send an email that appears to be from a legitimate source, such as a bank or an online retailer. The email will typically ask the recipient to click on a link and enter their personal information, such as their login credentials or credit card number. Once the victim enters this information, the criminal can use it to steal their identity or commit fraud.
Pretexting
Pretexting is another common social engineering tactic. In a pretexting attack, the criminal will create a fake scenario to gain the victim’s trust. For example, the criminal may pretend to be a bank employee and ask the victim to verify their account information. Once the victim provides this information, the criminal can use it for fraudulent purposes.
Baiting
Baiting attacks involve the criminal offering the victim something of value, such as a free USB drive or a gift card, in exchange for their personal information. Once the victim takes the bait, the criminal can use their personal information for malicious purposes.
Scareware
Scareware attacks involve the criminal creating fake security alerts or pop-up messages to scare the victim into taking action. For example, the victim may be told that their computer is infected with a virus and instructed to download a fake antivirus program. Once the victim downloads the program, the criminal can use it to steal their personal information.
Goals of Social Engineering
The ultimate goal of social engineering attacks is to obtain valuable information, such as login credentials, credit card numbers, or other sensitive data. Criminals can use this information for a variety of purposes, including identity theft, fraud, or espionage. Social engineering attacks can also be used to gain access to secure systems or networks, allowing criminals to steal intellectual property or conduct other nefarious activities.
Common Social Engineering Tactics
To protect yourself from social engineering attacks, it is important to be aware of common tactics that criminals use.
Phishing
To protect against phishing attacks, you should:
Always verify that the sender is legitimate before providing any personal information
Use anti-phishing software to block know
SECURITY AND SOCIAL ENGINEERING.ppt
This document discusses social engineering and how to protect against it. Social engineering involves manipulating people to gain access to sensitive information. It is a common way for criminals to steal data from organizations. The document outlines various social engineering tactics like pretexting and phishing used to fool victims into providing passwords, financial details, or other personal information. It emphasizes that security is everyone's responsibility and provides tips for protecting yourself such as using strong passwords, multi-factor authentication, recognizing inappropriate requests, and reporting any security concerns.
SECURITY AND SOCIAL ENGINEERING.ppt
This document discusses social engineering and provides tips to protect against it. Social engineering involves manipulating people to gain access to sensitive information. It is a common method used by criminals to steal passwords, financial data, and other confidential information from organizations. The document outlines common social engineering tactics like pretexting and phishing scams. It emphasizes that security is everyone's responsibility and provides recommendations like using strong passwords, enabling two-factor authentication, being wary of inappropriate requests for information, and reporting any security concerns.
Cyber Security Motivation
This is a general introduction and motivation to startup level students who are willing to pursue their careers in Cyber Security.
Types of Social engineering
Amidst the uncertainty and anxiety triggered by COVID-19, cyber attacks on the rise.
Here, Hiperdist presents a primer on social engineering - the different types of attacks and how you can stay safe in these times.
Using Social Media for Security Monitoring
Social media platforms have become the norm for companies to engage with customers and communicate information with the rest of the world. These networks also provide data that, when used with social monitoring tools, can be used to mitigate security issues before they become a major problem.
In this presentation you can learn how some of the world’s leading companies are using social intelligence to monitor security threats, identify liabilities, and get ahead of risk.
Covered:
Cyber security attacks
Fraud detection
Intellectual property protection
Executive and talent threats
Social Engineering, or hacking people
DefCamp #5, Bucharest, November 29th
Just as a chain is as weak as its weakest link, computer systems are as vulnerable as their weakest component – and that’s rarely the technology itself, it’s more often the people using it. This is precisely why it’s usually easier to exploit people’s natural inclination to trust than it is to discover ways to hack into computer systems. As the art of manipulating people into them giving up confidential information, Social Engineering has been a hot topic for many years. This session will discuss some of the most common Social Engineering techniques and countermeasures.
Spear Phishing Attacks
Spear phishing is sending targeted phishing emails to specific individuals. It is harder to detect than regular phishing because the emails appear more legitimate and are personalized. Spear phishing works by hackers researching a target, sending them an email containing malware, and using access to steal their data. It is a major threat, causing billions in losses annually. To prevent spear phishing, users should educate themselves, use strong passwords and two-factor authentication, and be wary of unsolicited emails.
Social Engineering: "The Cyber-Con"
A detailed look at the growing threat of social engineering, examples of such attacks, and recommendations for effective prevention in the workplace.
edu 3 ppt.pptx
Phishing is a hacking technique where attackers fool users into providing personal information by creating fake websites that look like trusted sites. There are several types of phishing attacks, including deceptive phishing which sends bulk emails with links to steal information, spear phishing which targets specific individuals, and whaling which targets high-level executives. Phishing can be prevented through user education and security technology, though no single measure completely stops it.
Cyber Security PowerPoint Templates.pptx
Phishing is a cyber threat wherein attackers deceive individuals into divulging sensitive information by masquerading as trustworthy entities. Through deceptive emails or websites, they aim to trick users into providing passwords or financial details. Vigilance, awareness, and verifying sources are vital defenses against falling victim to phishing attacks in the ever-evolving landscape of cybersecurity.
Similar to Social Engineering new.pptx (20)
PACE-IT, Security+3.3: Summary of Social Engineering Attacks
PACE-IT, Security+3.3: Summary of Social Engineering Attacks
Counterintelligence & The Insider Threat January 2019 (1).pptx
Counterintelligence & The Insider Threat January 2019 (1).pptx
More from Santhosh Prabhu
data_analysis_step_by_step_booklet.pdf
Here are the steps to name the ranges as specified in Task D:
1. Highlight cells A5 to C7 by clicking cell A5, holding down the mouse button and dragging to cell C7.
2. Right click within the highlighted range and select 'Name a Range' from the drop down menu.
3. In the Name box, type 'Rate' and click OK.
4. Highlight cells B11 to G18 by clicking cell B11, holding down the mouse button and dragging to cell G18.
5. Right click within the highlighted range and select 'Name a Range' from the drop down menu.
6. In the Name box, type 'Sold'
DataAnalysis.pdf
The document provides lesson notes for Excel 2019 Data Analysis that cover topics such as data management, locating and removing blank rows, removing duplicates, conditional formatting, sorting data, flash fill, tables, autofilters, advanced filter, and data forms. Guidelines are provided for structuring data and cleaning up raw data before working with it. Methods for locating blanks using conditional formatting and sorting, as well as removing blank rows, are described.
Wiley_Excel_Pivot_Tables_and_Charts.pdf
Here are some key questions you might want to ask about these sample data:
- What are the sales for the Camping category for each region?
- In each store, which days of the week see the most customers?
- In each store, which category has the highest sales?
- Which day of the week has the lowest total sales?
These are the kinds of questions that PivotTables are designed to help answer by enabling you to analyze and summarize your data in different ways. Let's take a look at how to create a basic PivotTable report from this sample data.
Predictive marketing _ easy ways every marketer can use customer analytics an...
This document provides an overview of predictive marketing and introduces the concept of using customer data and predictive analytics. It discusses how predictive marketing has become more accessible due to new technologies in big data and machine learning. The document also notes that while some large brands have used aspects of predictive marketing for years, adoption is accelerating among companies of all sizes as customers demand more personalized experiences and early adopters have found success.
Predictive HR Analytics_ Mastering the HR Metric ( PDFDrive ).pdf
This document contains copyright information for the book "Predictive HR Analytics: Mastering the HR Metric" by Martin R. Edwards and Kirsten Edwards. It includes information about copyright, publishing details, and permissions for reproducing content from the book. The document also contains blank pages and a table of contents for the book.
DMBAR - Data Mining and Business Analytics with R - Johannes Ledolter.pdf
This document provides an introduction to data mining and business analytics with R. It discusses how today's statistics applications involve large data sets with many cases and variables. Data mining attempts to extract useful information and discover meaningful patterns from these large data sets, which can contain megabytes or terabytes of information. The scale of typical data mining applications exceeds traditional statistics due to the large number of cases and variables. The goal is to find the few important variables among many collected and determine which represent just noise.
hrtdtna.pptx
This document discusses training needs analysis (TNA). It defines TNA as assessing an organization's training needs by identifying gaps between employees' current and required knowledge, skills, and attitudes. The document outlines several approaches to conducting a TNA, including analyzing performance gaps, the organization, tasks, and individuals. It describes methods like surveys, interviews, and reviews. TNA helps determine training content, needs, depth, targets, and type. The analysis identifies both training and non-training needs to improve performance.
Concept of training.pptx
Training involves teaching employees skills and knowledge to perform their jobs effectively. It is a planned effort to help employees acquire and apply required competencies like knowledge, skills, and attitudes. Training methods include on-the-job and off-the-job techniques and aim to bridge gaps in existing versus required skills and knowledge. The goal of training is to improve employee and organizational performance.
Data Encryption Standards (1).pptx
The document discusses the Data Encryption Standard (DES) algorithm. It describes how DES encrypts data in 64-bit blocks using a 56-bit key. The encryption process involves an initial permutation of the plaintext bits, followed by 16 rounds of substitution and transposition using 48-bit round keys generated from the original key. Finally, the ciphertext is produced after a final permutation.
methodsofdatacollectione.pptx
This document discusses various methods of collecting primary and secondary data. It describes observation, interviews, questionnaires, schedules, and other methods for collecting primary data like content analysis. It provides details on structured vs unstructured observation and interviews. It also discusses advantages and disadvantages of different primary data collection methods. Secondary data is described as already available data from government publications, reports, and other sources.
Decision Making.pptx
Managerial decision making involves cutting off undesirable alternatives to select the best option. Decisions range from routine programmed decisions to complex non-programmed decisions with uncertainty. Models for decision making include the classical rational model, administrative bounded rationality model, and political model that considers conflict. The decision process involves defining the problem, gathering information, developing alternatives, selecting an option, implementing it, and evaluating outcomes. Personal decision styles like directive, analytical, conceptual, and behavioral also influence the approach. Participation levels in group decisions range from autocratic to democratic based on factors like expertise and commitment.
More from Santhosh Prabhu (11)
Predictive marketing _ easy ways every marketer can use customer analytics an...
Predictive marketing _ easy ways every marketer can use customer analytics an...
Predictive HR Analytics_ Mastering the HR Metric ( PDFDrive ).pdf
Predictive HR Analytics_ Mastering the HR Metric ( PDFDrive ).pdf
DMBAR - Data Mining and Business Analytics with R - Johannes Ledolter.pdf
DMBAR - Data Mining and Business Analytics with R - Johannes Ledolter.pdf
Recently uploaded
20 Comprehensive Checklist of Designing and Developing a Website
Dive into the world of Website Designing and Developing with Pixlogix! Looking to create a stunning online presence? Look no further! Our comprehensive checklist covers everything you need to know to craft a website that stands out. From user-friendly design to seamless functionality, we've got you covered. Don't miss out on this invaluable resource! Check out our checklist now at Pixlogix and start your journey towards a captivating online presence today.
How to Get CNIC Information System with Paksim Ga.pptx
Pakdata Cf is a groundbreaking system designed to streamline and facilitate access to CNIC information. This innovative platform leverages advanced technology to provide users with efficient and secure access to their CNIC details.
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Unlocking Productivity: Leveraging the Potential of Copilot in Microsoft 365, a presentation by Christoforos Vlachos, Senior Solutions Manager – Modern Workplace, Uni Systems
National Security Agency - NSA mobile device best practices
Threats to mobile devices are more prevalent and increasing in scope and complexity. Users of mobile devices desire to take full advantage of the features
available on those devices, but many of the features provide convenience and capability but sacrifice security. This best practices guide outlines steps the users can take to better protect personal devices and information.
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
ここ3000字までしか入らないけどタイトルの方がたくさん文字入ると思います。
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Discover how MongoDB Atlas and vector search technology can revolutionize your application's search capabilities. This comprehensive presentation covers:
* What is Vector Search?
* Importance and benefits of vector search
* Practical use cases across various industries
* Step-by-step implementation guide
* Live demos with code snippets
* Enhancing LLM capabilities with vector search
* Best practices and optimization strategies
Perfect for developers, AI enthusiasts, and tech leaders. Learn how to leverage MongoDB Atlas to deliver highly relevant, context-aware search results, transforming your data retrieval process. Stay ahead in tech innovation and maximize the potential of your applications.
#MongoDB #VectorSearch #AI #SemanticSearch #TechInnovation #DataScience #LLM #MachineLearning #SearchTechnology
20240607 QFM018 Elixir Reading List May 2024
Everything I found interesting about the Elixir programming ecosystem in May 2024
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Full-RAG: A modern architecture for hyper-personalization
Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Join us to introduce Milvus Lite, a vector database that can run on notebooks and laptops, share the same API with Milvus, and integrate with every popular GenAI framework. This webinar is perfect for developers seeking easy-to-use, well-integrated vector databases for their GenAI apps.
Presentation of the OECD Artificial Intelligence Review of Germany
Consult the full report at https://www.oecd.org/digital/oecd-artificial-intelligence-review-of-germany-609808d6-en.htm
Climate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
Building RAG with self-deployed Milvus vector database and Snowpark Container...
This talk will give hands-on advice on building RAG applications with an open-source Milvus database deployed as a docker container. We will also introduce the integration of Milvus with Snowpark Container Services.
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Securing your Kubernetes cluster_ a step-by-step guide to success !
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
Maruthi Prithivirajan, Head of ASEAN & IN Solution Architecture, Neo4j
Get an inside look at the latest Neo4j innovations that enable relationship-driven intelligence at scale. Learn more about the newest cloud integrations and product enhancements that make Neo4j an essential choice for developers building apps with interconnected data and generative AI.
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
Leonard Jayamohan, Partner & Generative AI Lead, Deloitte
This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.
Recently uploaded (20)
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
National Security Agency - NSA mobile device best practices
National Security Agency - NSA mobile device best practices
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Generative AI Deep Dive: Advancing from Proof of Concept to Production
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Introducing Milvus Lite: Easy-to-Install, Easy-to-Use vector database for you...
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...
Social Engineering new.pptx
- 2. What is Social Engineer? • Social engineering is the act of manipulating a person to take an action that may or may not be in the “target’s” best interest.
- 3. Why hacker use Social Engineering? • Least Resistance • 10 time more successful than other attacks • A common element of malicious Attackers
- 4. Typical goals • Money • Ego • Revenge • Cause • Entertainment • Knowledge
- 5. Common Attacks • Customer Service • Delivery Person • Phone • Tech Support
- 6. Social Engineering methods • Dumpster Diving • Shoulder surfing • Baiting • Vishing • Phishing • Whaling
- 7. Dumpster Diving Dumpster Diving • “Dumpster diving” means searching trash for useful information. The trash may be in a public dumpster or in a restricted area requiring unauthorized entry. Dumpster diving depends on a human weakness: the lack of security knowledge. Many things can be found dumpster diving (e.g., CDs, DVDs, hard drives, company directories, and so forth). Probably the most famous example of dumpster diving
- 8. Dumpster Diving • Credit Card Receipts. • Bills. • Printed Email. • Password. • Phone Number. • Names. • Printed Emails. • Expense Reports.
- 9. Shoulder Surfing • A shoulder surfing attack explains a situation when the attacker can physically view the devices screens and the password typing keypad to obtain personal information i.e. one of the group of attack methods requires the hacker (attacker) to be physically close to the victims for the attack to succeed and thus a few shoulder surfing attacks will occur with intruders virus malicious intentions or virus malware accessing it. Some similar might result from nosy to people, where it is more an invasion of our privacy.
- 11. Baiting • As mentioned above, baiting is a kind of attack where a social engineer will use a false promise or reward to trap victims and steal their sensitive information by infecting their systems with malware. Baits are very attractive and enticing, not to mention manipulative, and their end goal is to infect your system and gain access to personal information. • Attackers who practice baiting use physical devices and enticing offers that appeal to people’s curiosity or need to trap them and get what they want from their victims. In many ways, baiting is similar to phishing attacks, but overall, it’s different from most social engineering attacks. Why? Because these attacks offer something free that’s relevant to the target.
- 13. Phishing • Phishing is a form of social engineering where attackers deceive people into revealing sensitive information or installing malware such as ransomware. Types of Phishing: • Spear Phishing. • Whaling. • Vishing. • Email Phishing-General.
- 14. Spear Phishing • Spear phishing is an email or electronic communications scam targeted towards a specific individual, organization or business.
- 16. Whaling • A whaling attack, also known as whaling phishing or a whaling phishing attack, is a specific type of phishing attack that targets high-profile employees, such as the chief executive officer or chief financial officer, in order to steal sensitive information from a company.
- 17. Whaling Example:
- 18. WHAT IS VISHING? • Vishing is a cyber crime that uses the phone to steal personal confidential information from victims. Often referred to as voice phishing.
- 19. Smishing • Smishing is a type of phishing attack that uses social engineering to get personal information about someone using text messaging.
- 20. How Zoom is being exploited for phishing attacks • Creating a Zoom phishing email • Sending fake Zoom meeting to victim • Victim clicks on Zoom meeting phishing link • Malicious code is loaded in the victims system.