Social-Engineering Tricks and Data Protection (Grade 11 NSC Matric Computer Application Technology): Revision Notes
Social-Engineering Tricks and Data Protection
Understanding social engineering
Social engineering is a technique that cybercriminals use to gain access to computer systems, personal data, and other valuable information by exploiting basic human psychology rather than using technical hacking methods. Instead of breaking through security systems with code, attackers manipulate people into voluntarily giving up their sensitive information.
What makes social engineering particularly dangerous is that it targets the weakest link in any security system - humans. Research shows that social engineering is actually the most effective way for attackers to gain illegal access to computer systems, because it's often easier to trick someone into revealing their password than it is to crack it through technical means.
Common social-engineering attacks
Phishing attacks
Phishing is one of the most common forms of social engineering and typically happens through email. Attackers send messages that appear to come from legitimate organisations like banks, schools, or popular websites, trying to trick you into giving out personal information or money.
Real-World Phishing Example:
You receive an email that claims to be from your bank, stating that your account has been suspended and you need to reset your password immediately. The email contains a link that looks like it goes to your bank's website, but actually takes you to a fake site designed to steal your login credentials. When you enter your account details on this fake website, the attackers capture your information and can then access your real account.
Email spoofing and website spoofing
Email spoofing involves creating fake emails that appear to come from trusted sources. These emails are designed to look exactly like official communications and will either directly ask for sensitive information or redirect you to a fake website where your information will be stolen.
Website spoofing works hand-in-hand with email spoofing. Attackers create websites that look identical to legitimate sites like banking portals, social media platforms, or shopping websites. These fake sites are designed to capture any information you enter, including usernames, passwords, and credit card details.
Pharming attacks
Pharming is similar to phishing but involves creating fake websites that request sensitive information. A common pharming technique involves attackers setting up official-looking websites that allow users to supposedly "change" their passwords. However, instead of actually changing the password, the fake site records both the username and current password, allowing the attacker to take over the account completely.
The key difference between pharming and phishing is that pharming often doesn't require the victim to click on a malicious link - attackers can sometimes redirect web traffic to their fake sites through other technical means.
Protecting yourself from social engineering
What to do if you're a victim
If you suspect that you've accidentally revealed financial information to a social engineering attack, take immediate action:
- Contact your bank immediately and ask them to put a hold on any accounts that may have been compromised. Don't wait to see if anything suspicious happens - prevention is always better than recovery.
- Change your passwords immediately if you think you might have revealed any login credentials. This includes not just the specific account you're worried about, but any other accounts where you use similar passwords.
- Monitor your accounts closely for any unusual activity and report anything suspicious to the relevant organisations straight away.
Prevention strategies
The best defence against social engineering is awareness and caution. Always be sceptical of unsolicited communications asking for personal information, especially if they create a sense of urgency. Legitimate organisations rarely ask for sensitive information via email, and they certainly won't threaten to close your account if you don't respond within a few hours.
Data protection through backups
Why backing up is important
It's essential to back up your data regularly because hardware can fail unexpectedly, and accounts can be compromised by cybercriminals. When you create backups, you're essentially creating copies of your important information that can be used to restore your data if something goes wrong with your original files.
Data loss can happen for many reasons - your computer might crash, your hard drive might fail, your device could be stolen, or you might accidentally delete important files. Having regular backups ensures that you won't lose years of work, precious photos, or important documents when these situations occur.
Manual backup methods
The simplest way to back up your data is using the basic copy and paste functions on your computer. This method works well for small amounts of data or when you want complete control over what gets backed up.
Step-by-Step Manual Backup Process:
- Set up a backup schedule to determine how often you'll create backups (weekly or monthly is usually sufficient for most people)
- Purchase an external hard drive that has enough storage space for your important files
- Connect the external drive to your computer on your scheduled backup day
- Select and copy the files and folders you want to back up using the standard copy command
- Create a dated folder on your external drive with the current date in the name (for example, "Backup_2024_January_15")
- Paste all the copied files into this new folder
- Safely disconnect the external drive and store it in a secure location away from your computer
- Repeat this process according to your backup schedule
To recover files from this type of backup, simply connect your backup drive to your computer and copy any damaged or missing files back to your main storage device.
The main limitation of manual backups is that they require you to remember to do them regularly, and each backup contains all your files even if they haven't changed, making backup files quite large over time.
Using Windows backup and restore utility
Windows includes a built-in backup utility called "Backup and Restore" that can automate much of the backup process and make it more efficient. This tool can create incremental backups, which means it only backs up files that have changed since the last backup, saving time and storage space.
Setting Up Windows Backup and Restore:
- Connect your external hard drive to your computer
- Open the Start menu and search for "Control Panel" to access the system settings
- Find and click on "Backup and Restore (Windows 7)" in the Control Panel options
- Click "Set up backup" to begin configuring your backup settings
- Select your external hard drive as the backup destination
- Choose your backup options: You can either let Windows choose which files to back up automatically (which will include your Documents, Music, Videos, and other personal folders), or you can manually select specific folders to include in your backups
- Click "Save Settings and Run Backup" to create your first backup
The Windows backup utility will then run according to the schedule you set up, automatically creating backups without you having to remember to do it manually.
Restoring from Windows backup
If you need to restore files from a Windows backup:
- Connect your backup drive to your computer
- Open Backup and Restore from the Control Panel
- Click "Restore All Users' Files"
- Choose "Browse for Files" or "Browse for Folders" depending on what you want to restore
- Select "In the Original Location" and click "Restore"
This will put your files back exactly where they were before, replacing any damaged or missing files.
Cloud storage for backups
One potential problem with external hard drive backups is that both your computer and the backup drive could be lost in the same incident - for example, if there's a fire, flood, or theft. Cloud storage solves this problem by storing your information on remote servers that you can access from anywhere with an internet connection.
It's important to understand the difference between cloud storage and cloud backup:
- Cloud storage is when you manually choose specific files to upload to an online account. These files become independent of your computer, so even if you delete them locally, they remain in your cloud storage.
- Cloud backup involves installing software that automatically monitors certain files and uploads any changes to the cloud. This ensures that your most current version is always backed up online without you having to remember to do it manually.
Cloud backup services are particularly useful for people or businesses with large amounts of important data, because if one computer fails, all the files can still be accessed from the cloud backup server.
Popular cloud storage providers
Several companies offer cloud storage services with different features and pricing:
Google Drive integrates well with Google's other products like Gmail and Google Docs. It provides 15 GB of free storage, after which you need to pay a monthly fee for additional space.
Apple iCloud works seamlessly with Apple devices including Mac computers, iPhones, iPads, and iPods. It offers 5 GB of free storage but requires payment for larger amounts.
Dropbox gives users 2 GB of free storage and allows you to access your files from web browsers, desktop computers, or mobile devices.
Microsoft OneDrive integrates well with Microsoft products like Word and SharePoint. Everyone with a Microsoft account receives 5 GB of free storage space, with paid options available for more space.
When choosing a cloud storage provider, consider factors like how much storage you need, what devices you use, and which other software and services you already use regularly.
Summary
Key Points to Remember:
- Social engineering exploits human psychology rather than technical weaknesses - be sceptical of urgent requests for personal information
- Phishing emails often look legitimate but contain links to fake websites designed to steal your credentials
- If you think you've been victimised, immediately contact your bank and change your passwords
- Regular data backups are essential because hardware can fail and accounts can be compromised
- Cloud storage provides off-site backup protection that external drives cannot match