Social Engineering Testing

Australia Wide. Experts in Cyber Security

One of the most successful methods spies and criminals use to gain access to a company is social engineering. Social Engineering Testing is a part of penetration testing that aims to identify and validate weaknesses associated with your staff’s ability to abide by detailed policies and methods. An attack is usually carried out by someone who intentionally influences a staff member’s judgement or general interest.

Common methods social engineers use are:
  • Baiting – whereby the attacker leaves an infected peripheral such as a USB memory stick in a common staff area in the hope a staff member inserts it into their computer or hands it to the IT department.
  • Tailgating – whereby an attacker follows another staff member into a secure area before the door has closed.
  • Phishing – whereby an assailant sends an email masked as another staff member or a genuine source and directs the staff member to open the infected file or follow a link.
  • Pretexting – whereby the attacker persuades a staff member to hand over restricted material by mimicking someone else.