Office of the Chief Information Security Officer

Social engineering is the psychological manipulation of people to obtain information or access systems for malicious purposes. Unlike technical hacking techniques, social engineering exploits human psychology. Cybercriminals use these tactics to lure unsuspecting individuals into exposing data, spreading malware infections, or granting access to restricted systems.

Most social engineering attacks employ the following tactics:

  Posing as a trusted brand:

• Scammers impersonate well-known companies that victims trust.
• By mimicking familiar brands, they trick victims into following instructions reflexively, without proper precautions.
• Some scammers create fake websites resembling major brands using readily available kits.

Exploiting human instincts:

• Social engineers manipulate victims’ emotions and instincts.
• These tactics drive people to take actions that aren’t in their best interests
• For example, scammers may call employees, posing as IT support personnel to trick them into divulging passwords. 

Protect yourself:

• Stay skeptical of unexpected emails or texts.
• Avoid clicking suspicious links—hover over them first.
• Keep security software updated.
• Report phishing attempts to prevent others from falling victim.

Remember, vigilance is key. Share this information to raise awareness and protect against social engineering attacks! 

Ninjio - Social Engineering