The nonsense of social engineering
I am often asked about social engineering during penetration tests. This is an attack method in which people are unknowingly enticed to disclose information or to support the attacker in his plan. In the preparation phase, the company's website and possibly existing profiles on various social platforms (e.g. XING, LinkedIn or Facebook) are queried to [...]