From the course: Ethics in Cybersecurity
Unlock this course with a free trial
Join today to access over 25,500 courses taught by industry experts.
Social engineering
From the course: Ethics in Cybersecurity
Social engineering
Social engineering is widely considered the most popular method for compromising organizations, both by penetration testers and by cybercriminals. And while cybercriminals may not be concerned with the ethical boundaries of their social engineering attacks, you'll want to avoid crossing certain lines in your social engineering engagements. Social engineering can include any act where you try to trick someone into saying, doing, or sharing something that they otherwise shouldn't. One reason cybercriminals favor this attack technique is that it's wildly effective. As a matter of fact, the 2024 Verizon Data Breach Investigations report found that the human element was a significant factor in 76 percent of data breaches. Phishing is the most well-known type of social engineering attack, but it's far from the only option. Where phishing leverages email to deliver the attack, criminals turn to smishing or SMS phishing and vishing, or voice phishing to evade email security controls…