Chapter 1
Operating Systems
Course: 220 1202 Comptia A Exam Core 2
Subject: 220 1102 Comptia A Plus Exam Core 2
Chapter: Security
1. Social Engineering Attacks
Social engineering is a form of manipulation where attackers exploit human behavior to gain unauthorized access, steal data, or perform other malicious activities. Here are common social engineering attack methods:
1.1 Phishing
- Description: Phishing involves attackers sending emails that appear to be from reputable sources to trick users into providing sensitive information, such as login credentials or financial details.
- Method: These emails often contain malicious links, attachments, or requests for confidential information.
- Real-Life Example: An attacker sends an email appearing to be from a bank, requesting the recipient to "verify" their account details by clicking a link and entering their credentials on a fake website.
1.2 Vishing (Voice Phishing)
- Description: Similar to phishing, but conducted over the phone. Attackers impersonate trusted entities to trick victims into revealing sensitive information or making payments.
- Real-Life Example: A caller pretends to be from a government agency, demanding sensitive information like Social Security numbers under the pretext of a "serious issue."