How to Stop Your Business Becoming a Victim of Social Engineering

You can have top-notch security in place but there is still one danger: social engineering. It’s the old kid on the block, but most of us have never heard of it. Perhaps the more familiar term is ‘con’: the art of manipulating people to take certain actions or divulge private information. Social engineers are a special type of hacker who skip the hassle of writing code and go straight for the weakest link in your security defenses – your employees. A phone call, a cheap disguise or casual email may be all it takes to gain access, despite having solid tech protections in place.

Here are just a few examples of how social engineers work:

Email: Pretending to be a co-worker or customer who ‘just quickly’ needs a certain piece of information. It could be a shipping address, login, contact or personal detail that they pretend they already know, but simply don’t have in front of them. The email may even tell you where to get the data from. The hacker may also create a sense of urgency or indicate fear that they’ll get in trouble without this information. Your employee is naturally inclined to help and quickly sends a reply.

Phone: Posing as IT support, government official or customer, the hacker quickly manipulates your employee into changing a password or giving out information. These attacks are harder to identify and the hacker can be very persuasive, even using background sound effects like a crying baby or call-center noise to trigger empathy or trust.

In person: A delivery man uniform gets past most people without question, as does a repairman. The social engineer can quickly then move into sensitive areas of your business. Once inside, they essentially become invisible, free to install network listening devices, read a Post-it note with a password on it, or tamper with your business in other ways.

It’s impossible to predict when and where (or how) a social engineer will strike. The above attacks aren’t particularly sophisticated, but they are extremely effective. Your staff have been trained to be helpful, but this can also be a weakness. So what can you do to protect your business? First, recognize that not all of your employees have the same level of interaction with people, the front desk clerk taking calls all day would be at higher risk than the factory worker, for example. We recommend cyber-security training for each level of risk identified, focusing on responding to the types of scenarios they might find themselves in. Social engineering is too dangerous to take lightly, and far too common for comfort.

Talk to me about your cyber security options today. Call me at 07976 151 148

Hi, I’m sending out FREE computer tips and tricks updates twice a month, here is an example. If you subscribe via This Link, you will get FREE access to all my eBooks. I have designed them to help you get the best out of the technology you use in your business.  

The best way to recover from a compromise, malware or system failure is to have a backup.
Did you know that if you use an SSD drive, most new computers have one installed by default, when you click delete your data is gone forever, immediately!
I can provide a backup service to protect you from losing your photos and documents It will also help to protect you from Ransomware. You will be getting;

• An Industry leading brand
• I will manage and monitor to ensure you are protected.
• I will provide, install and support the backup software
• Free back recovery
• Fully encrypted to protect your data
• An external drive is included (if required)

If you get the backup service as part of my Total Protection Plan, I also offer FREE virus recovery.

Does your current provider offer that? Have you even got a backup? I offer this service from £10 per month. Contact me for more information

I can help with:
Computer Repair
PC Repair
PC Tune-up
Virus Removal and Repair
Network Repair
Computer Monitoring Service
Data Recovery
Data Backup
New Device Setup
Computer Training
Printer Repair