Social Engineering

Social engineering is a collection of techniques used to manipulate people into performing actions or divulging confidential information. InfoSight offers multiple forms of social engineering with our uniquely suited and highly skilled professionals. Some examples include:

Email Phishing

Utilizing harvested email information from the Internet and/or those provided by you, Assessors will customize evasive and probing emails and send them to your employees to gather information about the email system and to gather usernames and passwords for later use on the internal network.

Telephone Phishing

Assessors will contact a sampling of employees who are most likely to be contacted by hackers and test their willingness to divulge sensitive information about the institution and/or its customers.

Impersonations

Assessors will perform in person social engineering of employees at remote branches and offices in an attempt to harvest sensitive information about the client and its customers. We may also attempt to gain access to computer and communication rooms posing as service technicians. These attacks are generally performed on an impromptu basis as a result of successful telephony Social Engineering.