How hackers find your weak spots

The top four emthods hackers use to fool you

While there are an infinite number of social engineering exploits, typical ones include the following:

Stealing passwords: In this common maneuver, the hacker uses information from a social networking profile to guess a victim's password reminder question. This technique was used to hack Twitterand break into Sarah Palin's e-mail.

Friending: In this scenario, a hacker gains the trust of an individual or group and then gets them to click on links or attachments that contain malware that introduces a threat, such as the ability to exploit a weakness in a corporate system. For example, says Netragard CTO Adriel Desautels, he might strike up an online conversation about fishing and then send a photo of a boat he's thinking of buying.

Impersonation/social network squatting: In this case, the hacker tweets you, friends you or otherwise contacts you online using the name of someone you know. Then he asks you to do him a favor, like sending him a spreadsheet or giving him data from "the office." "Anything you see on a computer system can be spoofed or manipulated or augmented by a hacker," says Desautels.

Posing as an insider: Imagine all the information you could extract from an unknowing employee if you posed as an IT help desk worker or contractor. "Roughly 90% of the people we've successfully exploited during [vulnerability assessments for clients] trusted us because they thought we worked for the same company as them," Desautels says.

On the Netragard blog, he describes an exploit in which a Netragard worker posed as a contractor, befriended a group of the client's workers and set up a successful phishing scheme through which he gleaned employee credentials, eventually gaining entry to the entire corporate infrastructure.

CHANNEL CHOICE: Vote Now for your favourite in the three categories: Vendor, Distributor and Reseller. Voting closes August 8.

Tags hackerssecurity

More about Facebook

Comments

Comments are now closed

 

Latest News

10:45AM
Vodafone relying on high-value subscribers amid 137,000 customer loss
10:03AM
Brocade kitting the Australian Genome Research Facility for Big Data
09:27AM
Anchor goes Openstack to boost retail website performance
09:23AM
Adobe: Class division emerging in website design
More News
23 Jul
Dell Connected Security: Listen to what the experts have to say about security
24 Jul
The Rise of the Challenger Marketer
24 Jul
Veeam’s Crazy 8 Roadshow
24 Jul
Executive Sales Breakfast Briefing
View all events