Engenharia social: um caso de estudo dos riscos de um ataque efetuado por um ex-funcionário

Abstract

This case of study attempts to explain and show the risks of Social Engineering, a subject so undervalued and low approached in companies. A lot is spoken about information security and the importance of having protection tools against hacking and leaking information. However, the human element continues to be the weakest link in the process of leaking information and in the vulnerabilities exploitation. The unconcerned behaviour and the innocence of people dealing with each other make the habit of questioning, principal tool in defense against Social Engineering, to be left aside. The present work shows how common techniques of approach make possible the gain of trust and the convincing of the victim to give information or execute actions as the attacker wants to.