Cheap and automated socio-technical attacks based on social networking sites

Markus Huber, Martin Mulazzani, Sebastian Schrittwieser, Edgar R. Weippl · 2010

The vastly and steadily increasing data pool collected by social networking sites can have severe implications once this information becomes available to attackers. Whilst socio-technical attacks such as social engineering relied upon expensive background information collection techniques such as dumpster diving, social engineering attacks can nowadays be fully automated with data collected from social networking sites. In this paper we discuss several socio-technical attacks to finally present a novel large-scale social spam attack based on social networking sites.

Read the paper · More papers on PaperTik