|
|
|
|
|
|
|
|
|
Search engine optimization (seo) poisoning
| Глоссарий терминов по социальной инженерии и информационной безопасности |
It is not uncommon for social engineers to build a website around frequently used internet search terms in order to lure users into performing an action, such as downloading a trojan or divulging their credit card numbers. for example, a user might enter a computer error message into a search engine only to come across a downloadable “fix” on the first page of the search results. the software might be a trojan or rogue anti-virus software. see also reverse social engineering.
|
Reverse social engineering, английский
A scenario whereby the target approaches the attacker for assistance. for example, a virus notification warning may appear on the target’s computer with an accompanying number to call for assistance, whereby they are socially engineered for their credit card details, network authentication credentials etc. more commonly perhaps is the phenomenon of internet users approaching “support agents” on twitter that purport to be from banks, utility companies etc., with billing or other support issues. inevitably, the transaction culminates in the target being asked for their credit card, bank login details or other confidential information.
|
Frequently, английский
Frecuentemente
Performing, английский
Downloading, английский
- Загрузка; загрузка по линии связи
- Transferring fonts from the computer to the printer’s memory.
Downloadable, английский
Загружаемый по линии связи; допускающий загрузку
Engineering, английский
- Инжиниринг. техническая разработка проектов, составление смет, иногда также включает финансовое и экологическое обоснование проектов. так же деятельность по оказанию услуг в этой области
- Техника, инженерное дело
- Машиностроение; техника
- Американское сантехническое общество
- Инжиниринг. техническая разработка проектов, составление смет, иногда также включает в себя финансовое и экологическое обоснова- ние проектов. также деятельность по оказанию услуг в этой области.
- Инженерия
|
Security awareness training, английский
The process of educating users about it security risks and reinforcing the importance of compliance with security policies. most employees will have a level of awareness about the risks posed by, for example, the opening of unknown email attachments, but awareness does not always translate into behaviour. the real value of it security awareness training is that it pre-conditions users to make them more resilient against social engineering and more vigilant when handling data. metrics can be used to measure behavioural change. good it security awareness training takes into account the skillset of the audience and organisational culture.
Scareware, английский
Also known as “fake anti-virus”, scareware software issue a pop-up alert that aims to frighten unsuspecting internet users into purchasing worthless security software. scareware can also take the form of “system optimisation” software. many scareware applications are vectors for malware that connects your pc to a botnet. in many instances, scareware can be removed from an infected system without paying the attacker. for this reason, many cyberspace miscreants now propagate more profitable ransomware instead.
|
|
|
|
|
|
|
