From the course: Writing Secure Code for Android by Infosec

Unlock this course with a free trial

Join today to access over 25,400 courses taught by industry experts.

Social engineering

Social engineering

- Let's spend a moment to talk about social engineering. You know, there's an old saying you can't fix stupid, right? But it would be too simplistic to say that people who fall for social engineering are stupid, even highly educated, highly aware, highly security conscious IT professionals can be caught off guard now and again. Social engineering is a type of attack that does not exploit technology, although that might be sort of a side thing. It exploits human psychology because humans tend to be the weak link here. The goal is to trick a user into doing something or divulging something they ordinarily wouldn't do, that they shouldn't do. Here are some common types of social engineering attacks. You've probably heard of many of them. Perhaps the most common is phishing, spelled with ph. This is where we send a deceptive email to a wide range of people. Even if the email addresses aren't valid, we're trying to trick them into clicking something, opening an attachment, something to…

Contents