Preventing Social Engineering Attacks: Best Practices with LoginRadius

1. Social Engineering Attacks Your data is always vulnerable no matter where it resides. 98% of Hackers Rely on Social Engineering Attacks. The global average cost of a data breach is $3.92 million. While the average time to identify a breach is 206 days. Social engineering is the art of psychologically manipulating users so they make security mistakes and give up their confidential information. Why Social Engineering? Humans are emotionally WEAK and easier to TRICK. Trust Greed Desire Laziness Ego Anger Curiosity Jealousy Amusement Sadness Fear Loneliness Surprise Social Engineering AttackTechniques Phishing The hacker uses trickery and deceit via malicious email and text message campaigns to obtain sensitive data from users. Spear Phishing The hacker chooses specific individuals or enterprises and conducts well-researched attacks to manipulate the receipt. Baiting The hacker uses greed/curiosity to trap users with false promises and trick them into handing their login credentials. Tailgating When someone without proper authentication enters into a restricted area by physically bypassing the security measures in place. Scareware The hacker uses the perception of a threat to deceive users into visiting malware-infected sites and buying malicious software. Common Compromised Attributes 80.00% 80.00% 60.00% 60.00% 40.00% 40.00% 20.00% 20.00% 0.00% 0.00% Credentials Personal Internal Medical Bank Secrets Payment Classified Other System 96% of attacks arrive via phishing 3% is carried out through websites 1% via phone Intensity of Attacks 30% 66% 21% of targeted users open phishing messages. of malware is installed via malicious email attachments. of ransomware involves social actions like phishing. 88% 86% of organizations experienced spear phishing attempts in 2019. of attacks involved business email compromise (BEC) attempts. Who Is Targeted? EVERYONE How Social Engineering Works? Gather Collect information via different techniques. Plan Exit Outline how to execute the attack Leave without a trace. Hook Play Engage to deceive the victim. Execute the attack. Warning Signs of Social Engineering Stay away from the following people: Acting overly friendly or eager. Asking for immediate assistance. Acting nervous when counter questioned. Asking strange questions. Overemphasizing details. Luring with too good to be true offers. Refusing to give information. Threatening reprimands if their requests are ignored. Best Defenses for Social Engineering Attacks Delete any request for personal information. Implement 2FA/MFA to verify users. Don’t open emails from suspicious sources. Perform a regular backup. Employ an endpoint protection system. Conduct employee training. Set spam filters to high. MFA prevents more than 96% of bulk phishing attempts. 96% ABOUT LOGINRADIUS LoginRadius empowers businesses to deliver a delightful customer experience without compromising security. Using our customer identity platform, companies can offer a streamlined login process while protecting digital accounts and complying with data privacy regulations. © LoginRadius Inc | www.loginradius.com