Assessment

Social Engineering –
An Art of Hacking Human

FIRMUS penetration testing adopts the social engineering methodology from the organization called Social Engineering Framework.

Social Engineering is the art of hacking human. As humans are always the weakest link in any organization, testing how aware are the users against social engineering attacks is essential. FIRMUS penetration testing adopts the social engineering methodology from the organisation called Social Engineering Framework.

Information
Gathering

Craft a Customized Attack

Execution & Collecting Response

Reporting & Presentation

Information Gathering

Craft a Customized Attack

Execution & Collecting Response

Reporting & Presentation

FIRMUS has a combination of four major social engineering use cases to perform. Those use cases are as below;

1 - EMAIL PHISHING ATTACH

Sending malicious emails to the target user.

2 - VISHING ATTACK

Obtaining sensitive information from target user via phone call.

3 - PACKAGE DROP ATTACK (USB/CD ROM)

Dropping media storage around the office premises with malicious content.

1 - EMAIL PHISHING ATTACH

Sending malicious emails to the target user.

2 - VISHING ATTACK

Obtaining sensitive information from target user via phone call.

3 - PACKAGE DROP ATTACK (USB/CD ROM)

Dropping media storage around the office premises with malicious content.

The outcome of this will be very helpful for the organisation to gauge the security awareness level of their employees. Eventually, the organisation can focus on strengthening a certain group of people / department(s) that fell for the social engineering attack and enhance their dissemination of security awareness training / information.

Explore Our Assessment Services

Let us help you make informed decisions and set your business up for success through our range of assessment services.

Network Penetration Testing

Web Application Penetration Testing

Incident Response (IR)

Source Code Review

Mobile Application Penetration Testing

Security Configuration Review

Social Engineering

Wireless Penetration Testing

Breach and Attack Simulation (BAS)

Compromise Assessment

Intelligence Led Penetration Testing

Network Resiliency Assessment

Red Teaming

Talk To Us

Penetration testing, cyber security strategy, proof-of-value, or just some information? Our domain experts provide bespoke cyber security offerings to solve your digital transformation challenges.