Social engineering is a technique that an attacker or penetration tester uses to convince a person into revealing sensitive (confidential) information. Social engineering can be performed against the corporate help desk, administrative team, IT staff, executive team, and so on. Any employee with access to valuable corporate information is definitely a prime target; the challenge is to manipulate the victim into believing everything you are saying and to gain their trust. Once the victim's trust has been obtained, the next stage is to exploit it.
The following are the various ways in which social engineering can greatly impact an organization:
- Create a loss in revenue due to the exposure of confidential information, which will lead to customers losing trust in the company.
- Loss of privacy since corporate data is stolen and may be leaked online...
