- How are social engineering attacks evolving, and how can organizations defend against them?
Social engineering attacks are becoming more advanced all over the world. Cyber attacks that utilize social engineering include phishing, deepfakes, spear phishing, and watering hole attacks. Cybercriminals are able to implement such attacks by taking advantage of an individual’s sense of security and trust and gaining access to their personal information by posing as a familiar figure or organization. Not only that, but most people fall for this type of attack due to the assumption that malicious emails are automatically filtered out of their inboxes. Organizations should train employees on what to look for and the proper actions to take. This includes reporting any suspicious emails they receive and refraining from clicking on any URLs or file attachments in order to protect themselves.
- How does social media affect the spread of cybercrime, and what puts users at greater risk of becoming victims?
Nearly 60% of the global population uses one or multiple forms of social media. Typically, these social media users share personal information on their profiles or with others they talk to. This is a risk because the more information an individual uploads and shares about themselves, the more at risk they are for becoming a victim of spear phishing, whaling attempts, or spoofing. In addition to that, social media platforms are also a hub for cybercriminals to spread malware. Since numerous advertisements exist on these platforms, it’s simple for a hacker to create a fake advertisement with an enticing offer to attract victims and gain control of their accounts.