Social engineering
Psychological trick to fool victims into putting themselves at risk
Social engineering encompasses a wide range of psychological techniques used by cybercriminals, spammers, phishers and malware creators to deceive and entrap potential victims.
Most spam uses some form of social engineering to lure traffic to spamvertised websites: boasts of incredible bargains, world-beating products or amazing benefits are all intended to suck people in to following the links provided. Sex, wealth and fear are by far the most common lures, along with warnings of unpaid bills or compromised banking systems. Bank phishing emails often pose as messages from the bank urging users to log into their account (via a spoofed version of the webpage) to change, confirm or update their details. Rogue anti-malware uses the fear key, warning people of spurious malware infestations on their systems and demanding money in return for cleanup functionality, while malware such as the Storm attack has taken advantage of human curiosity by promising information on the latest dramatic news stories, as well as the promise of human contact in the form of greetings cards, to attract new victims to infected web pages.
The end user is always the weakest link in the cybersecurity chain, and any motivational pressure which can be brought to bear may be exploited by cybercriminals.
Related web links
