What is Social Engineering?
Social engineering is employing the use of deceptive techniques to manipulate individuals into divulging sensitive information.
Email Phishing
Exchanges of sensitive information over email happen almost constantly, day in and day out. Yet, hardly any of these exchanges go through the proper channels for authentication and authorization. RedTea Security’s social engineering testing uses email phishing and spear-phishing to target staff into visiting unknown websites, divulging sensitive information or getting them to perform an action they otherwise should not be.
On-site physical Phishing
During a physical social engineering engagement, RedTeam engages staff directly (overt) or indirectly (covert) in an effort to identify weaknesses in the way they physically handle visitors and those pretending to be employees, vendors or business partners. RedTeam physical social engineering consultants masquerade as vendors, new employees, business partners and more in order to entice staff into divulging sensitive information or permitting access to sensitive areas of the facility.
Telephone Phishing
Text messages, phone calls, robocalls, and other forms of communication via mobile devices can be deceiving. What happens when your employees provide sensitive data, payment information, and other corporate information to unauthorized users through phone calls? We help you test real-world scenarios on how your employees could fall for these attempts and train them on how to best prevent it.
Why should I conduct Social Engineering?
In 2019, 68% of all recorded data breaches were a result of a social engineering attacks. A Rhymetec social engineering test will simulate attack from the perspective of a bad actor, such as a malicious hacker and attempt to uncover security vulnerabilities. In doing so, you would gain valuable insight into the security posture of the assets and be able to fix them before hackers are able to cause serious damage by exploiting them. Hackers who use social engineering are constantly coming up with new means of attack; that’s why it’s so important to work with third-party testing
professionals who are on the cutting edge of the latest attack trends