From the course: Ethics in Cybersecurity

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Social engineering

Social engineering

Social engineering is widely considered the most popular method for compromising organizations, both by penetration testers and by cybercriminals. And while cybercriminals may not be concerned with the ethical boundaries of their social engineering attacks, you'll want to avoid crossing certain lines in your social engineering engagements. Social engineering can include any act where you try to trick someone into saying, doing, or sharing something that they otherwise shouldn't. One reason cybercriminals favor this attack technique is that it's wildly effective. As a matter of fact, the 2024 Verizon Data Breach Investigations report found that the human element was a significant factor in 76 percent of data breaches. Phishing is the most well-known type of social engineering attack, but it's far from the only option. Where phishing leverages email to deliver the attack, criminals turn to smishing or SMS phishing and vishing, or voice phishing to evade email security controls…

Contents