?
Close
social

Social Engineering

Description

Cybercriminals often use psychological manipulation as a tactic. By creating emails or web pages impersonating known organizations, attackers try to trick people into opening malicious attachments, clicking unsafe links, and disclosing personal details.

Our social engineering services focus on helping your organization with the ability to detect and respond to phishing attacks. We also provide an overview of possible threats by creating a customized assessment per organization.

Benefits

tick-bullet-large

Identification of potential threats

tick-bullet-large

Monitor proper reactions and workflows

tick-bullet-large

Raising awareness amongst users

tick-bullet-large

Simulating real case scenarios

What we test

Phishing

Phishing is one of cyber-criminals’ most common vectors of attack. By producing emails impersonating trustworthy individuals and organizations, attackers aim to entice users to click unsafe links and attachments or reveal confidential details. A phishing test can be conducted as a standalone exercise or as part of a Red Team Service.

Spear-phishing

Spear phishing is a highly targeted phishing attack designed to compromise a particular individual, usually a system administrator or another user of high privilege.

Cold Calling

Also known as phone phishing or voice phishing, our consultants will attempt to call individuals at your organization to get sensitive information. If successful, we will use the information gained to pivot further or make a more convincing phishing test.

Methodology

1

Information gathering

We gather information on targeted organizations and individuals.

2

Scoping

We exchange the information we gathered and make a final list of targets.

3

Preparation

We prepare the material used as part of a social engineering test. This means crafting emails, cloning websites, and preparing attachments.

4

Test

We send out the emails and monitor the clicks, entered credentials, or received sessions from the targets. Also, communication is ongoing, and status is synced with you.

5

Reporting

A report with all the details about the test is prepared and delivered.