First, there was phishing. The goal: To trick targets into revealing information or completing unauthorized actions. Around since the 1990s, this attack vector remains the top internet crime reported to the FBI, partly because of its effectiveness in exploiting human emotions when pretexting. After all, you can’t simply issue a patch or apply a firewall to human instinct. For example, how a new starter may feel under pressure to skip usual security procedures after being told, ‘You need to download this file for your onboarding.’ Or how a junior payroll administrator is unlikely to challenge someone who says they’re the regional finance director and needs an invoice to be paid immediately.’ There’s huge power in manipulating people’s feelings and responses to trust, fear, and urgency. These forms of social engineering threats are going nowhere. In fact, they’re becoming more advanced, as shown by the rise in voice phishing, otherwise known as…
_Cybersecurite via GRISE Veille Globale on Inoreader
