Assessment<\/p>\n<\/div>
Social Engineering \u2013
\nAn Art of Hacking Human<\/p><\/h2><\/div><\/div><\/div>
FIRMUS\u00a0penetration testing adopts the social engineering methodology from the organization called Social Engineering Framework.<\/p>\n<\/div><\/div><\/div>
![](\"https:\/\/firmussec.com\/sg\/wp-content\/uploads\/2023\/01\/Social-Engineering-1.jpg\" "\\"Social")
<\/span><\/div><\/div><\/div>Social Engineering is the art of hacking human. As humans are always the weakest link in any organization, testing how aware are the users against social engineering attacks is essential. FIRMUS penetration testing<\/a> adopts the social engineering methodology from the organisation called Social Engineering Framework.<\/p>\n<\/div>\n<\/div>\n<\/div><\/div><\/div> FIRMUS has a combination of four major social engineering use cases to perform. Those use cases are as below;<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div><\/div> Sending malicious emails to the target user.<\/p>\n<\/div> Obtaining sensitive information from target user via phone call.<\/p>\n<\/div> Dropping media storage around the office premises with malicious content.<\/p>\n<\/div> Sending malicious emails to the target user.<\/p>\n<\/div> Obtaining sensitive information from target user via phone call.<\/p>\n<\/div> Dropping media storage around the office premises with malicious content.<\/p>\n<\/div> The outcome of this will be very helpful for the organisation to gauge the security awareness level of their employees. Eventually, the organisation can focus on strengthening a certain group of people \/ department(s) that fell for the social engineering attack and enhance their dissemination of security awareness training \/ information.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div><\/div><\/div><\/div><\/div> Let us help you make informed decisions and set your business up for success through our range of assessment services.<\/p>\n<\/div><\/div><\/div> Network Penetration Testing<\/p><\/a><\/div><\/div><\/div> Web Application Penetration Testing<\/p><\/a><\/div><\/div><\/div> Incident Response (IR)<\/p><\/a><\/div><\/div><\/div> Source Code Review<\/p><\/a><\/div><\/div><\/div> Mobile Application Penetration Testing<\/p><\/a><\/div><\/div><\/div> Security Configuration Review<\/p><\/a><\/div><\/div><\/div> Social Engineering<\/p><\/a><\/div><\/div><\/div> Wireless Penetration Testing<\/p><\/a><\/div><\/div><\/div> Breach and Attack Simulation (BAS)<\/p><\/a><\/div><\/div><\/div>Information
\nGathering<\/h3><\/div>Craft a Customized Attack<\/h3><\/div>
Execution & Collecting Response<\/h3><\/div>
Reporting & Presentation<\/h3><\/div>
Information Gathering<\/h3><\/div>
Craft a Customized Attack<\/h3><\/div>
Execution & Collecting Response<\/h3><\/div>
Reporting & Presentation<\/h3><\/div>
1 - EMAIL PHISHING ATTACH<\/h3><\/div>
2 - VISHING ATTACK<\/h3><\/div>
3 - PACKAGE DROP ATTACK (USB\/CD ROM)<\/h3><\/div>
1 - EMAIL PHISHING ATTACH<\/h3><\/div>
2 - VISHING ATTACK<\/h3><\/div>
3 - PACKAGE DROP ATTACK (USB\/CD ROM)<\/h3><\/div>
Explore Our Assessment Services<\/h3><\/div>