> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/red-team/social-engineering.md).

# Social Engineering

**Social Engineering** is the psychological manipulation of people into performing actions or divulging confidential information. Unlike technical attacks that exploit system vulnerabilities, social engineering relies on human behavior to gain unauthorized access to systems, networks, or data.

#### **Key Principles of Social Engineering**

* **Manipulation of Trust**: Social engineers exploit human trust to gain access to sensitive information or systems.
* **Exploitation of Cognitive Biases**: These attackers often leverage mental shortcuts or biases that humans use in decision-making, such as authority, urgency, and reciprocity.
* **Psychological Pressure**: Social engineers apply pressure to compel individuals to act quickly without thinking critically about the consequences.
* **Observation and Reconnaissance**: Social engineers often research their targets to gather personal information that can help tailor the attack.

***

## **Types of Social Engineering**

### **Phishing**

* **Definition**: Phishing is a fraudulent attempt to acquire sensitive information such as usernames, passwords, or financial details by impersonating a trustworthy entity.
* **Method**: Attackers often send emails, text messages, or fake websites that look legitimate, urging the target to click a link or provide confidential data.
* **Variants**:
  * **Spear Phishing**: Targeted phishing, where attackers customize the message based on the victim’s personal information.
  * **Whaling**: A type of phishing aimed at high-profile targets such as executives (also known as CEO fraud).
  * **Vishing (Voice Phishing)**: Phishing via phone calls, where attackers impersonate legitimate entities to extract information.

### **Pretexting**

* **Definition**: Pretexting involves creating a fabricated scenario (pretext) to obtain personal information or gain access to systems.
* **Method**: The attacker might pose as a trusted individual (e.g., a police officer, IT technician, or company representative) and request sensitive information, such as Social Security numbers or passwords, under the guise of a legitimate need.
* **Example**: An attacker calls an employee pretending to be from the HR department and asks for sensitive information to update their records.

### **Baiting**

* **Definition**: Baiting involves offering something enticing (the "bait") to encourage the victim to take an action that compromises their security.
* **Method**: Attackers might leave infected USB drives in public places or offer free downloads of software or media, which upon interaction, install malware or steal information.
* **Example**: An attacker might leave a USB stick labeled "Confidential" in a public place, hoping someone will plug it into their computer, thus infecting their system with malware.

### **Tailgating (or Piggybacking)**

* **Definition**: Tailgating involves an attacker gaining physical access to a restricted area by following an authorized person through a security checkpoint, such as a door or gate, without using proper credentials.
* **Method**: The attacker may ask someone to hold the door open or simply follow them through a secure door.
* **Example**: An attacker may approach an office building and wait for an employee to swipe their badge to enter, then tailgate them through the door without authorization.

### **Quizzes and Surveys**

* **Definition**: Social engineers may use surveys or quizzes to collect personal information from targets. These might appear as fun, casual questionnaires, but the data collected can be used to gain access to accounts or systems.
* **Method**: The attacker may send out a fake quiz or survey that asks for personal details, such as pet names, mother's maiden name, or other information often used in security questions.
* **Example**: A fake Facebook quiz asks for answers to questions that could be used as security questions on bank accounts.

### **Shoulder Surfing**

* **Definition**: Shoulder surfing involves observing a target's activity or information over their shoulder, typically in public spaces, to obtain sensitive data.
* **Method**: Attackers watch individuals enter their PINs, passwords, or other private information when using mobile phones, ATMs, or computers in public places.
* **Example**: An attacker watches someone enter their password at a coffee shop and later uses that information to gain unauthorized access to their accounts.

### **Reverse Social Engineering**

* **Definition**: Reverse social engineering occurs when the attacker creates a problem or issue for the target and then offers assistance in solving it, thereby gaining access to sensitive information or systems.
* **Method**: The attacker may sabotage a system, then call the victim to offer a solution or claim to be the technical support provider, eventually tricking the target into providing access or information.
* **Example**: An attacker might purposely cause an error on a user’s computer, then call the user pretending to be IT support and request sensitive login details to “fix” the issue.