CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 1

Social Engineering Techniques

This chapter covers the following official Security+ exam objective:

• ▶ 1.1 Compare and contrast different types of social engineering techniques.

Essential Terms and Components

• ▶ social engineering

• ▶ phishing

• ▶ smishing

• ▶ vishing

• ▶ spam

• ▶ spam over Internet messaging (SPIM)

• ▶ spear phishing

• ▶ Dumpster diving

• ▶ shoulder surfing

• ▶ pharming

• ▶ tailgating

• ▶ eliciting information

• ▶ whaling

• ▶ prepending

• ▶ identity fraud

• ▶ invoice scam

• ▶ credential harvesting

• ▶ reconnaissance

• ▶ hoax

• ▶ impersonation

• ▶ watering hole attack

• ▶ typo squatting

• ▶ influence campaign

• ▶ principles (reasons for effectiveness)

Social engineering has been around as long as humans. Many people are familiar with face-to-face interactions ...