Journal Entry #4 - Social Engineering
Today's class was a blast. Our assignment to create a social engineering scam was fun because it gave us the opportunity to be on the other side of phishing attempts for once. Our group created the QR code to RSVP for the Chainsmokers concert, and I'm confident that this social engineering attempt would work if we put those posters up around campus. It looks real because of the TCU logo, the Crew logo, and it would be on campus so there's no reason for someone to immediately question it. We also added the urgency effect by offering a chance to win a meet and greet if you filled out the GoogleForm within the next hour.
It was hilarious when Dr. Williams revealed that he appointed a person in each group to try and steal personal information from the other group members. This worked excellently because each of us were busy/distracted working on the assignment and trying to make it convincing, while also conversing with each other about various other topics. When Grace asked to send herself the GoogleForm link that I created, I didn't even think twice about handing her my laptop, and I even got up and walked away to grab candy while she did it.
She did the exact same thing with Christiauna, and she was able to get both of our phone numbers and could have continued with stealing information if she wanted to. This highlights the importance of stopping and thinking twice about sharing your things, even if it's someone you think you can trust. It was an amazing example to show us in class because it shows how easy it is for people to steal your information if they wanted to.
Great review of our social engineering class. I appreciate your kind comments.
ReplyDelete