Social Engineering

Oh no! My brain has been hacked!

Usually, when most people think of cybersecurity they imagine a hacker with wizard-like powers breaking into servers and pilfering data. So, we go out and spend loads of money on the latest anti-malware, beefiest firewalls, and flashiest security tech (namely whatcha-ma-callits, whirly-gigs, and flippity-flonks --- very technical terms, don't ask questions).


However, most criminals don't rely on sophisticated software and expert computer hacking skills. They attack the weakest link in security - people. They are human-hackers (aka Social Engineers). This is the art of manipulating people to gather confidential information, install malicious software, or be granted access to restricted areas. 

These attacks can be presented in the form of phishing emails, phone calls, and even a scammer showing up in-person at your office. 

Awareness is your best defense. Who and what do you trust? Always question anything that is unsolicited. Even if you have a Paypal account and receive an email from Paypal asking you to log in -- be suspicious. Go to the website via a search engine and not by following any links in an email. 

Slow down! Scammers will try to rush you into making a decision -- no legitimate business will corner you with an ultimatum unless they really don't want to do business with you. Take your time, think about what you're seeing, be skeptical.


A lot of this is common sense, but in our busy everyday lives it's easy to go on auto-pilot. Be vigilant and utilize common sense with your digital actions the same way you would do if you were walking around in a dangerous part of town. 


Most social engineering attacks can be prevented by just paying attention to the details in front of you.