Pen The Hacker


Bringing you the best experience of cybereducation and awareness


Phishing

phishing image Phishing is a broad term for social engineering, when the attacker impersonates a trusted person in order to gain valuable data from the victim such as ID number, bank card pin number. The attacker may pretend to be a friend, employer, service provide. The routes that an attacker can use are only limited by their ability.









Spear Phishing

spear phishing image Spear Phishing targets specific individuals, regardless of their position in the company. This involves gathering information on the people around them, friends, family and place of employment. The attackers can piece information from posts, the people tagged, the places visited, likes, dislikes and much more. With spear phishing, scammers can swindle money from the individual.










Whaling

whaling image Whaling is a phishing attack that targets high-level employees, eg. CEOs and CFOs. The intruder conducts information gathering using open source information such as social media posts, job posts with specific skills requirements, friends and relatives. The research is very invasive but not illegal at this point. The attacker can use the credentials of low-level employees to gather more information on the high-level employees. The goal of the intruder is to gain sensitive information from the employee, such as receipts which may shed the light on the suppply chain. The supply chain includes service provikder and service receivers such as clients and contractors of the company.

Safety Procedures




Created by pth