What is Pretexting?

Pretexting is a type of scam where an attacker creates a fake story, or “pretext”. It is intended to trick someone into giving away sensitive information. It can also trick someone into doing something that compromises security. Phishing uses fear and urgency. Pretexting relies on building trust and appearing credible. Both tactics have the same goal.

How Does Pretexting Work?

Here’s a step-by-step look at how a typical pretexting attack happens:

Research

The attacker gathers information about the target. They often use public sources such as social media and company websites.

Creating a Fake Story

Using the gathered information, the attacker creates a believable story. They might pretend to be someone they are not. Often an IT support technician, a business partner, or even a government official.

Making Contact

The attacker contacts the target. This is often done through phone calls or emails, using their fake story to establish trust. It can even be in person.

Exploiting Trust

Once they have gained the target’s trust, the attacker acts. They may ask for sensitive information or request the target to perform certain actions. They may ask for things like transferring money or providing login details. It could even be done through a screen share.

Using the Information

The attacker then uses the obtained information to steal data, money, or cause other harm.

Popular Real-World Examples

CEO Scam

An attacker pretends to be the CEO and asks an employee in finance to urgently transfer money to a new vendor.  Whatever the request, it often looks legit as if it is coming from the top!

Fake IT Support

An attacker pretends to be from the IT department and asks an employee for their login details to fix a fake issue. They may just ask to do a screen share and run scripts unknowingly to the target.

Vendor Request

An attacker poses as a trusted vendor. Then ask for payment details or access to company systems to update account information. Or they ask you to send your payment to a new account.

Protecting Your Business from Pretexting

To protect your business from pretexting attacks, follow these steps:

Employee Training

Regularly train your employees about the dangers of pretexting and how to spot it. Encourage them to verify identities before sharing any sensitive information. This can be your strongest form of protection. Arming your team with the knowledge to protect your business can go a long way. These attackers are very convincing. Creating a culture of security will help protect your business.

Verification Protocols

Set up strict procedures for when giving out sensitive information or making financial transactions. This can include call-back procedures, multi-factor authentication, and verification through official channels. If you add these into your processes you can avoid a costly mistake.

Access Controls

Limit access to sensitive information based on job roles. Only give employees access to the information they need to do their jobs.

Incident Response Plan

Have a clear plan for responding to security incidents. Make sure employees know how to report suspicious activities and understand the steps to take if a breach occurs. With the growing technologies and sophisticated attackers, businesses should be prepared. An incident will occur, know how your business will respond.

Use Technology

Implement security technologies! The tools are available, so use them. Most likely your competitors and attackers are using them. Examples include email filters, intrusion detection systems, and endpoint protection to detect and prevent pretexting attempts.

Wrapping Up Pretexting

Pretexting is a clever and dangerous form of cyber-attack. It relies on building trust to steal information or money. It uses our human decency and kindness against us. By understanding how pretexting works and taking steps to prevent it, you can better protect your business. Remember, the key to preventing pretexting is to stay vigilant, educate your employees, and adopt strong security practices.

To learn more about Cyber Security Visit https://isoc.net/managed-services/cyber-security/