top of page

Human Hackers: The Hidden Threat of Social Engineering

Social engineering is one of the fastest growing cyber crimes as offenders are more adept in targeting people’s confidential information. Criminals use social engineering because it exploits human psychology rather than technical vulnerabilities.



Here are a few reasons why it's effective:

  1. Manipulation of Trust: Social engineers often impersonate trusted figures or organizations, making it easier to deceive targets into sharing sensitive information.

  2. Lack of Awareness: Many people are not trained to recognize social engineering tactics, making them more susceptible to scams.

  3. Emotional Triggers: Criminals often create a sense of urgency or fear, prompting victims to act quickly without thinking.

  4. Cost-Effectiveness: It requires less technical skill and fewer resources compared to hacking systems directly.

  5. High Success Rate: By leveraging social interactions, criminals can bypass complex security measures that rely on technology alone.


How do cyber criminals use my information?

A good social engineer will often take weeks or months getting to know a company through a variety of ways. Scouring the major social media sites and business websites for bits of personal information about you are easy wins.


Unsecured, public profiles are the most useful, but even if you keep your privacy settings on high, there’s no guarantee that a family member or close acquaintance might not have shared information about you on their profiles.


How can my business fall victim to a social engineering attack?

Another way in which a cybercriminal can find information on you is by researching other organisations you’re affiliated with, for example, local charities or perhaps you sit on a local board. Personal details send strong signals about your interests and the types of appeals that might be most effective on you.


On a more conspiratorial note, someone you know from a company may be recruited to infiltrate your activities, or industrial espionage specialists may profile you through the internet and get to know your preferences, hobbies, contacts, and friends.


Overall, social engineering is a powerful tool because it targets the human element, which is often the weakest link in security.


 

Join our community and become one of the many organisations benefiting from expert guidance and toolkits, designed to help boost your cyber resilience against fraud and cyber-attacks.

 

Opmerkingen


NPCC
TVP Logo
Hampshire Police Logo
SEROCU logo
Surrey Police Logo
Sussex Police Logo
Cyber Essentials Logo
Cyber Essentials Plus Logo

The contents of this website are provided for general information only and are not intended to replace specific professional advice relevant to your situation. The intention of the South East Cyber Resilience Centre is to encourage cyber resilience by raising issues and disseminating information on the experiences and initiatives of others.  Articles on the website cannot by their nature be comprehensive and may not reflect the most recent legislation, practice, or application to your circumstances. The South East Cyber Resilience Centre provides affordable services and Cyber Essential Partners if you need specific support. For specific questions please contact us at enquiries@secrc.police.uk.  The South East Cyber Resilience Centre does not accept any responsibility for any loss that may arise from reliance on information or materials published on this website.  It is not responsible for the content of external internet sites that link to this site or which are linked from it.

© 2022 - 2025 The South East Cyber Resilience Centre

Registered in England & Wales, No. 13263448 

TM

  • Facebook for South East Cyber Resilience Centre
  • LinkedIn for South East Cyber Resilience Centre
  • X for the South East Cyber Resilience Centre
  • Youtube for South East Cyber Resilience Centre
  • Instagram for South East Cyber Resilience Centre
  • RSS feed for South East Cyber Resilience Centre
  • Threads
bottom of page