Social Engineering Using Social Networking Sites

Abstract

Social engineering is a process that cyber criminals use to psychologically manipulate an unsuspecting person into divulging sensitive details. Social engineering is an extremely powerful tool that can be deployed to exploit the human's element of security and inherently psychological manipulation. According to a security industry survey, social engineering tops the list of the 10 most popular hacking methods. The first step in any social engineering attack is to collect information about the attacker's target. A social networking site is an online platform that allows users to create a public profile and interact with other users on the website. They are also a hotbed for social engineering cyber attacks to personal information; they are a relevant source of wealth of personal and organisational information that can be found within these social environments. This article defines social engineering and some techniques of social engineering attacks based on social networking sites, drawbacks on a users' privacy, and arising implications.