₦airaland Forum

barackodam:

Name: Barackodam
School: ABU Zaria
Stance: Social media- a tool of social engineering


Before i start proper, i would like to give us a preamble of what the topic says by defining a few keyword.

Social Media: Websites and applications that enable users to create and share content or to participate in social networking.
Social Engineering: Social engineering is the art of manipulating people so they give up confidential information.

The types of information these criminals are seeking can vary, but when individuals are targeted the criminals are usually trying to trick you into giving them your passwords or bank information, or access your computer to secretly install malicious software–that will give them access to your passwords and bank information as well as giving them control over your computer.
Criminals use social engineering tactics because it is usually easier to exploit your natural inclination to trust than it is to discover ways to hack your software. For example, it is much easier to fool someone into giving you their password than it is for you to try hacking their password (unless the password is really weak).

Your employees are on Facebook, LinkedIn, Twitter and Quora, and they are adding personal information to the Web every single day. Most people don’t realize how much personal information is available online. Needless to say, we’ve all become comfortable sharing personal tidbits that used to be reserved for private, face-to-face conversations. This is the kind of fodder that social engineers rely on to launch an attack. A simple search of spokeo.com or any other of a number of sites will pull the wool off of anyone’s eyes really quick.

If I were a hacker and wanted to do some recon on a company, I need not look any further than the social sites of their employees. I can use that information to launch a social engineering attack on their company. Here’s how a common scenario might play out:

Let’s assume I am a malicious person and I want to obtain all the user account data and records for a particular organization. Their physical security is relatively good, and I have failed at high level attempts to get any kind of employee information. I have nothing. That’s fine. Let’s hop on LinkedIn and do a company search for this organization. Easy enough – I now have a list of potential targets, their job titles, employment histories, education history, affiliated organizations, business contacts and in some cases their pictures. Big deal you say? This type of information is invaluable when profiling your targets. With the information here, I can narrow down a few targets based on what I am trying to find, pull up more intimate information regarding their family, friends and hobbies on Facebook and have a very specific profile on the potential targets. Armed with this information, it would be easy to spoof a text message from a business contact or spouse asking them to visit a website containing malware and exploits. I could use their hobby information to entice them to click a link or open an attachment from a carefully crafted email that allows me to plan a virus. On a more advanced level and far more nefarious level, I could build a geolocation profile from embedded location information in posts and photos. Then all I have to do it wait for someone to work at a coffee shop and step away from their briefcase for a moment to slip in a USB drive loaded with auto-executable binaries that they’ll eventually plug in to a computer. This all sounds very “Mission Impossible” but I assure you, it’s highly possible and happens enough to pay attention.

Common social engineering attacks
Phishing attempts. Typically, a phisher sends an e-mail, IM, comment, or text message that appears to come from a legitimate, popular company, bank, school, or institution.

These messages usually have a scenario or story:
The message may explain there is a problem that requires you to "verify" of information by clicking on the displayed link and providing information in their form. The link location may look very legitimate with all the right logos, and content (in fact, the criminals may have copied the exact format and content of the legitimate site). Because everything looks legitimate, you trust the email and the phony site and provide whatever information the crook is asking for. These types of phishing scams often include a warning of what will happen if you fail to act soon, because criminals know that if they can get you to act before you think, you’re more likely to fall for their phish.

The message may notify you that you’re a ’winner’. Maybe the email claims to be from a lottery, or a dead relative, or the millionth person to click on their site, etc. In order to give you your ’winnings’ you have to provide information about your bank routing so they know how to send it to you, or give your address and phone number so they can send the prize, and you may also be asked to prove who you are often including your Social Security Number. These are the ’greed phishes’ where even if the story pretext is thin, people want what is offered and fall for it by giving away their information, then having their bank account emptied, and identity stolen.

The message may ask for help. Preying on kindness and generosity, these phishes ask for aid or support for whatever disaster, political campaign, or charity is hot at the moment.



REFRENCES
http://www.webroot.com/us/en/home/resources/tips/online-shopping-banking/secure-what-is-social-engineering
http://www.webroot.com/us/en/home/resources/tips/online-shopping-banking/secure-what-is-social-engineering
http://www.securityweek.com/social-media-makes-way-social-engineeringified soon

After all this Grammer, na two LIKES you get? Aim defeated.

All na JOB CREATION!

This man obviously lacks SHAME

Specialist900:
Lemme go prepare my own CV too. This might be my lucky Chance

GRACE [/b]stands taller in the presence of [b]LUCK.

My point is; just seek for his grace.

Jboyossai:
Hmmmmm, nothing wey no go happen for buhari administration.....anyways, they deserved it........

You are right, na so them burn students for aLuu community for rivers State still for him tenure.

I no blame you.

I suppose OP does not know the meaning of the term dilapidated!

Meanwhile no governor achieved Ameachi's feet in that sector in the last dispensation and not even Wike can.

Cry ON Anti Ameachi.

Your womanhood will live long... PEJ

Edo again

The social media has never found relevance like it has in the just concluded 2015 general elections. It is good for our polity.

Thanks the PMB campaign team, this couldn't have been possible.

I see no coherence between the topic and the body of the thread.

Midehi:
men that understands and help their women like this are the BEST!

If done in excess, it might just become part of your daily routine else you be in soup.

I intend doing it, but not without moderation.

jnrbayano:
He feels he has less chance of being a La Fura Roja.

Gracias amigo Derik Osede Prieto.

On behalf of Derik, I say Gracias también.

Good development, (eko, warri, portharcourt, bonny and eket mosquitos are willing to welcome you.

No take too long to make up your mind pls.

This man still dey born?

Cutehector:
lmao.... I neva said I will bang her... Am not even attracted to hot air balloons

Better said and done o!

She be like ship

Cutehector:
u damn fat sha.. I wonder who stays ontop.

kilode100:
Wouldn't you love to know??

Hector! Run for your life pleasezzzzzzzzzz!

Forzap:
Kul story,so wizkid trekked 2 togo?u don dey madt

Neither did he trek or drive to Togo, he flew. The car is simply not his, most likely adebayo's.

Ezenwammadu:
l hope somebody has informed him that Mandela is dead and apartheid over before he goes on a long rant demanding the relase of mandela and the end of the apartheid regime

How this alien found himself here beats me.

Go ahead and correct him @ your own peril.

Dmayor7:
Michael Jackson said it right....

Heal the world, make it a better place, for you and for me and the entire universe......

Listen...

By designing a site for him/her, you are aiding him/her into pepetrating his evil act the more with that website.

The internet is wide and later on, one of your one might fall into his trap through the website.

You really need the money i understand...

But their is something we called Good Principle.

Standing for good and shurning evil no matter what, no matter the amount of discomfort it will bring is Good Principle!

We all have concience.....

Yes, it speaks to us often, it is just that we always shut it off because it always tells us the bitter truth which we don't want to hear...

Search your soul deeply for the true voice and decide what to do next.

Like Joshua said to the Israelites....

Choose today whom you will serve, as for me and my family we will serve God

The power to choose is in your hands...

Remember....

Your decision today decides where you will be tommorow.


Hope i made some impact?...

Over impact the worry you...


Good one.

Mr President does no wrong, if he wishes, he should not even attend any of the sessions.

Euro31:


Buhari I beg u in the name of God..... Pls call ur boiz to order.

If not for the modification of RULE TWO (2).

carzola:
Q

















































































































































X





















































D







































B












































































M
































































H






























































































U

Na wao!!!!!!

Incomplete write-up.

Then give am na! Shoo!

kazmanbanjoko:
T

Thomas

The president can, only by pulling a few strings.

A third class graduate if given the chance would want to prove a point, that sometimes grades do not really portray the exact intellectual status of someone. I bet such persons would work even more than a donkey.

The PDP members in the senate may not be in the majority, still have the office of the majority leader and deputy senate president, what an irony!

With this, PDP will have full control of the senate.

Anyway, I am still for Change.

If you believe this, you will believe anything!

When almost all engineering courses are absent and you see fishery, home economics, graphic arts etc , you know someone needs brain surgery

madridguy:
1. My Husband and Sambo is a good people

2. The President was once a Child and the Senators were once a Children

3. My Fellow Widows

4. A Good Mother takes care of his Children

5. The people sitting before you here were once a Children

6. Yes we are all happy for the effort,it is not easy to carry second in an international competition like this one – Addressing Press men after Female Under 19 Fifa World Cup

7. The Bombers who born them?wasn’t it not a woman? They were once a Children now a adult now they are bombing women and children making some children a widow

8. My Heart feels sorry for these Children who have become Widows by losing their Parents for one reason or another

9. We should have love for our fellow Nigerians irrespective of their NATIONALITY?

10. vote UMBRELLA and press your finger for UMBRELLA.

And someone said she was a good orator... na wao