{"id":7508,"date":"2024-09-02T17:12:43","date_gmt":"2024-09-02T22:12:43","guid":{"rendered":"https:\/?p=7508"},"modified":"2024-09-03T10:50:33","modified_gmt":"2024-09-03T15:50:33","slug":"protect-yourself-from-social-engineering-dont-be-fooled","status":"publish","type":"post","link":"https:\/\/cidenet.com.co\/en\/protect-yourself-from-social-engineering-dont-be-fooled\/","title":{"rendered":"Protect yourself from social engineering: Don't be fooled!"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Written by: Miguel \u00c1ngel Blanco L\u00f3pez<\/span><\/p>

\"El vivo vive del bobo\" - Popular adage.<\/strong><\/em><\/p>

We have all at some point in our lives heard the popular saying quoted above, and I hope you are not offended. I know there are no \"pacifiers\" here, but there is a lot of naivety, and for the topic I will talk about it fits perfectly.<\/p>

In this era, we enjoy great facilities thanks to technology. Most likely, many of the activities you used to do in person are now done through a web platform or an application on your cell phone. A large percentage of people now perform tasks such as bill payments, bank transfers, and even purchases, just to mention a few, mediated by information technologies.<\/p>

But... Are you sure that the website where you are about to enter your banking credentials is really the website of your bank? Are you sure that the platform where you are going to pay your utility bill is the one provided by the collecting agency? Are you sure that the store where I just shopped is authentic?<\/p>

All this refers to what is known as social engineering. INCIBE (Instituto Nacional de Ciberseguridad) of Spain defines the concept as a technique used by cybercriminals to gain the trust of a user and get them to do something under their manipulation and deception, such as: execute a malicious program, provide their private passwords, or buy from fraudulent websites.<\/p>

In my opinion, it all boils down to a scam that simply takes advantage of people's naivety and their few precautionary measures on the net. Generally, advanced computer knowledge is not required to perform a social engineering attack. As you can see, social engineering attacks do not always require password cracking or infecting devices with viruses; in social engineering attacks, we give all our valuable information to the attacker ourselves.<\/p>

Common social engineering attacks:<\/span><\/h2>

Vishing:<\/b> This technique consists of contacting the victim via phone call, impersonating a trusted entity or person, and thus manipulating the target to reveal personal information or perform actions that compromise their security and that of the computer systems and\/or devices to which they have access. Be very careful the next time you are called to tell you that you are a beneficiary of some government program, or when a supposed police patrolman calls you saying that your brother ran over someone and that they are going to give you directions to \"collaborate\" with him, because it is most likely an attempt to defraud or \"collaborate\" with him, because it is most likely an attempt to defraud you. <\/span>vishing<\/b>.<\/span><\/p>

\"\"<\/a>Phishing:<\/b> Have you ever received a text message from Amazon's manager himself with a job offer? Or maybe you received an email notifying you that your password was blocked or that your payment methods were rejected? Well, this is what is known as <\/span>phishing<\/b>A social engineering technique that seeks to obtain personal information from its victim by impersonating a trusted entity or person using text messages, emails and even by impersonating web pages.<\/span><\/p>

According to ESET's security report for Latin America (2023), the Latin American countries with the highest percentage of phishing detection are: Ecuador 8.0%, Costa Rica 7.2% and Colombia 5.7%. Note that Colombia is in third place, hence the importance of being very careful and pay attention to the information we deliver by the various media.<\/span><\/p>

How to protect yourself?<\/span><\/h2>

It is important to clarify that in the field of computer security no method or system is infallible: however, most of these types of attacks will fail if we are stricter with our security measures.<\/span><\/p>

To prevent becoming a victim of social engineering attacks, the computer security company Kaspersky<\/em> recommends:<\/span><\/p>

  1. Change your passwords frequently.<\/span><\/li>
  2. Enable multifactor authentication whenever available.<\/span><\/li>
  3. Always type the web address you want to visit, do not do it through the search engine results.<\/span><\/li>
  4. Do not expose your personal and\/or family information.<\/span><\/li>
  5. Do not allow strangers to connect to your main wifi network.<\/span><\/li>
  6. Do not leave your devices unprotected in public.<\/span><\/li>
  7. Use VPN (if available).

    <\/span><\/li><\/ol>

    Additionally, I would like to share my personal security socks, because as I mentioned before, it is not only through an application or technological device that our information can be stolen:<\/span><\/p>