What is a honey trap? A honey trap is probably best known from the world of espionage and politics, where a person would use sex as a tool to extract information. Mata Hari Probably one of the best- known honey trap stories comes from the First World War. Mata Hari was a Dutch woman who […]

What is diversion theft? Diversion theft started as an “offline” attack where the mal-actor tricks a courier into picking up or dropping off a package from the wrong location and hence either facilitating the delivery of their false package or accessing the real package. It’s also known as the “Corner game” or “Round the corner […]

What is malware? Malware is the collective name for several different types of malicious software that are harmful to a computer user. Malware can be delivered in several different ways including: Email: A link or file is included, and the recipient clicks on the link or opens the file. USB hardware device, e.g. memory stick: […]

What is pretexting? Pretexting is a form of social engineering where a mal-actor tries to convince you to give up valuable information or access to a service or system. The distinguishing feature of this kind of attack is that the mal-actor comes up with a story – or pretext – designed to fool you. In […]

What is a water-holing attack? A water-holing (or sometimes watering hole) attack is where a mal-actor attempts to compromise a specific group of people by infecting one or more websites that they are known to visit. The victims are usually from the same company or organisation and the goal is usually to gain access to […]

What is baiting? The Trojan horse In my earlier post “What is social engineering?” I looked at an example of baiting from Greek myth – the Trojan Horse. In this story, the Greeks have been besieging the city of Troy for 10 years and failed to penetrate its defences. So the Greeks constructed a wooden […]

What is vishing? Your phone rings and someone on the other end introduces them self as calling from a well-known company. Are they really? Or is this a scammer? Vishing, a combination of “voice” and “phishing”, is a phone scam designed to get you to share personal information. The call is designed to instil FUD […]