All

Social Hacking and Social Engineering

date:  Oct 16 2020
Author

Jordan Jancevski

In the wake of our previous posts about cybersecurity, ethical hacking as well as the dark web, this week we will try to cover one more topic in this field, and that is social hacking.

Before we start with this week’s topic, if you didn\’t have the chance to check out the articles mentioned above, follow this link here to give them a read.

Many people are likely to mix up the terms ‘social hacking’ and ‘social engineering’, so firstly, let’s see the difference between these two terms.

By definition, social engineering is the psychological manipulation of people into doing things, or simply disclosing confidential information. In other words, by using some human characteristics, the ‘attacker’ tries to persuade the person to behave as the attacker wants.

On the other hand, the term social hacking stands for when this method is used to enter another computer system or network. This happens when the systems and networks are too complicated to penetrate, so the hackers use the human vulnerability to get to the information they want.

When speaking about attacking human vulnerabilities, we are talking about the three major characteristics that would give access to the attacker, and those are: trust, authority, and curiosity.

Experienced cybercriminals and social hackers usually do simple things like for example, calling the IT administrator in the company, throwing a few technical words and abbreviations, in order to confuse him, and voila – he gets many important information just by persuading the person that this is a real call.

Companies across the globe are familiar with this practice and they are already investing a lot of money in training of their employees, such as security awareness training, so they can be prepared for such attacks.

Another interesting thing that companies tend to do is simulate a social hack, and this gives them an even clearer picture of how the employees would react.

According to Arizona State University Psychology and Marketing Professor Robert Cialdini, there are six key principles in his theory of influence and those are: reciprocity, commitment and consistency, social proof, authority, liking, and scarcity.

Reciprocity – is simply returning back the favor, just like the free samples in Marketing.

Commitment and consistency – the people are more likely to have a firm grip on the commitment because they think that the ultimate goal fits their self-imager.

Social Proof – people will do exactly as the others are doing. For example, if a room is filled with people who are standing up every time they hear a beep, the person who enters the room at the latest, will follow them, even though he doesn’t know why he is standing up on every beep.

Authority – people are more likely to obey authority figures even for acts they personally don’t want to perform.

Liking – This includes the physical attractiveness stereotype, meaning people will buy products from those who they find attractive.

Scarcity – Basic marketing trick, terms like ‘limited offers’ skyrocket the sales.

Besides these six key principles, there are also a few other types of attacks that these hackers tend to use.

One of those is vishing or also known as ‘voice phishing.’ This term basically stands for social engineering over the phone, and the main goal is to get personal or financial information for the ultimate financial reward.

Phishing is the most common illegal technique of getting information illegally. The procedure here usually goes when the attacker sends an email to a person, that by the way seems very legitimate, asking for information like credit card number, PIN number, home addresses, etc.

The emails are usually very well done, using a legitimate company\’s logo and information, including their fonts and pictures to look as persuasive as possible. The links of ‘verification’ of personal information are always following to web sites that look just like the company’s. This is where we need to be extremely careful.

In the sea of possibilities, there are tons of options for obtaining confidential information and people are not even aware of such things as social hacking and engineering.

The ultimate action one can do in terms of avoiding being a victim of such attacks is to get as most informed as possible and take precautions to the next level.

These days people can easily be ‘swayed’ to accidentally disclose personal information and we must remain careful to the fullest in order to dodge these attacks.

Stay safe!

Read more on our blog

Discover similar posts

The shift towards skills-based hiring: A new era of talent acquisition

In today’s fast-evolving job market, there’s a growing trend towards skills-based hiring, which places a stronger focus on a candidate’s practical abilities rather than traditional qualifications like degrees or titles. This shift is fundamentally changing how companies approach recruitment, resulting in more dynamic and diverse workforces.

Organizations are increasingly recognizing that skills-based hiring can lead to better job performance, role fit, and inclusivity, which is driving widespread adoption of this model.

What is skills-based hiring?

Skills-based hiring is a recruitment strategy where employers focus on a candidate’s specific skills and competencies rather than their formal education or past job titles. For instance, companies may prioritize technical skills, such as proficiency in certain programming languages or software, or soft skills like communication and problem-solving, over traditional criteria like a four-year degree. As noted by SHL, this approach allows companies to uncover hidden talent and focus on candidates’ potential, helping organizations foster diversity, equity, and inclusion.

Why skills-based hiring is gaining popularity

  1. Access to a wider talent pool
    Traditional hiring methods often exclude individuals who may not have formal degrees but possess valuable skills. By adopting skills-based hiring, companies can tap into non-traditional talent pools, including self-taught professionals and those from different socio-economic backgrounds. As Workable reports, nearly 45% of companies in 2024 are expected to drop degree requirements for many roles.
  2. Improved role fit and performance
    Skills-based hiring often leads to a better match between the candidate and the job. Focusing on specific, measurable skills means that employees are more likely to succeed in their roles from day one. According to BCG, hiring based on skills is five times more likely to predict job performance than hiring based solely on degrees. By assessing candidates based on real-world competencies, employers can ensure a higher level of job readiness and productivity.
  3. Fostering lifelong learning and agility
    As companies face rapid technological changes, employees need to continuously upskill to remain relevant. A skills-based approach promotes a culture of lifelong learning, encouraging employees to focus on acquiring new competencies rather than relying on outdated credentials. This mindset aligns with the needs of industries such as IT and digital marketing, where practical skills and staying current with trends are crucial .
  4. Reducing bias and increasing diversity
    Traditional hiring processes can unintentionally reinforce biases related to education or socio-economic background. By shifting the focus to skills, companies can reduce these biases, offering more opportunities to underrepresented groups. According to SHL, a skills-based model promotes inclusivity by leveling the playing field, making it easier for companies to create a diverse workforce.

The challenges of implementing skills-based hiring

While the benefits of this approach are clear, there are several challenges that companies must navigate when adopting skills-based hiring practices.

  1. Defining clear skills criteria
    One of the main challenges is defining the precise skills required for each role. Companies must shift from focusing on traditional job descriptions to crafting skills-based profiles that clearly outline the necessary competencies.
  2. Effective skills assessment
    Assessing a candidate’s skills is often more complex than verifying their educational background. Companies must rely on practical assessments, such as tests or simulations, to evaluate real-world capabilities. For example, Boeing created an apprenticeship program for cybersecurity roles that doesn’t require a degree but emphasizes hands-on learning and skill development (
    McKinsey & Company) (BCG Global).
  3. Cultural change within organizations
    Shifting from a qualifications-based hiring approach to one focused on skills may require a significant cultural change. Long-standing hiring practices can be difficult to overhaul, and companies must invest in training hiring managers and redesigning recruitment processes to fully embrace skills-based assessments.

How companies can make the shift

  1. Invest in skills assessment tools
    Organizations need reliable tools to accurately assess candidates’ skills. Platforms offering practical evaluations, coding challenges, or case studies can help measure relevant abilities in a fair and transparent manner. As SHL highlights, using data-driven assessments allows companies to objectively evaluate competencies, improving hiring outcomes.
  2. Promote upskilling and internal mobility
    Fostering a culture of continuous learning is essential for the future workforce. Companies that encourage employees to reskill and grow within the organization can fill talent gaps internally. BCG notes that employees hired through skills-based hiring often experience longer tenures and are promoted at rates similar to those hired based on degrees.

How do we see it?

The shift toward skills-based hiring is more than just a trend; it represents a fundamental change in how organizations view talent acquisition. As businesses prioritize practical skills and competencies over traditional qualifications, they can build more dynamic, diverse, and high-performing teams. While there are challenges, including defining clear skills criteria and developing effective assessments, the long-term benefits of this approach make it a valuable strategy for future-proofing the workforce.

This approach is not only more inclusive and adaptable but also positions companies to better meet the demands of a rapidly changing job market. As SHL, BCG, McKinsey&Company and other industry leaders have demonstrated, skills-based hiring is key to unlocking hidden talent and ensuring long-term organizational success (McKinsey & Company).

Read More

20 reasons why leasing IT resources with SnapStack is a smart move for your business

In today’s competitive landscape, the increasing global demand for technology experts has made recruiting the right talent more challenging than ever. Finding skilled professionals that fit a company’s unique needs often feels like an uphill battle. So, how can businesses manage these challenges without suffering losses or delays?

One effective solution is outsourcing and leasing IT resources. Here are 20 reasons why this approach could be the key to long-term success.

1. STAY FOCUSED ON CORE BUSINESS FUNCTIONS

By leasing IT resources, you can concentrate on your core business functions. Let a specialized outsourcing team handle the technical aspects, giving you the bandwidth to recruit and manage business-critical talent.

2. ACCESS SPECIALIZED EXPERTISE WHEN NEEDED

Leasing allows you to tap into specialized developers only when you need them. This is ideal for projects that require niche skills without long-term employment commitments.

3. LEVERAGE A VAST NETWORK OF IT PROFESSIONALS

Our network boasts over 5,000 IT professionals with proven expertise in various technologies and industries. This ensures we can match you with the right resources efficiently.

4. BENEFIT FROM PRE-VETTED AND TESTED TALENT

All our experts go through rigorous selection processes, including interviews by recruiters. Most of our resources are tried and tested, having already demonstrated their skills in action.

5. GET QUICK ACCESS TO TOP IT EXPERTS

We offer rapid access to a diverse pool of highly skilled IT experts who have been tested through long-term international engagements across multiple industries.

6. ACHIEVE COST EFFICIENCY WITH ECONOMIES OF SCALE

Outsourcing allows you to share resources across different projects, improving economies of scale. You can lease part-time resources, ensuring you only pay for what you use, and reduce costs.

7. EASILY SCALE YOUR IT CAPACITY UP OR DOWN

Need to scale your team up or down in a couple of weeks? Leasing IT resources gives you the flexibility to adjust capacity quickly, meeting project demands without delays.

8. PAY ONLY FOR WORK DELIVERED

No need to worry about paying for sick days, vacations, or training. With leased IT resources, you only pay for the work completed, without the burden of long-term investments or legal obligations.

9. GET THE BEST TALENT AT COMPETITIVE RATES

By hiring globally, we can assemble physical or virtual teams that bring world-class expertise at competitive rates. This ensures you get top-notch performance within your budget.

10. SIMPLIFY IT AND VENDOR MANAGEMENT

Leasing with us removes the complexities of IT resource management. We take on the responsibility, reducing the burden on your HR and vendor management teams while minimizing the risk of project failure.

11. ENJOY FLEXIBLE AND CONVENIENT PAYMENT TERMS

We invoice at the end of each month with a 1-month payment term, giving you ample time to review and approve the work before making payments.

12. ELIMINATE THE RISK OF MISMATCHED HIRES

Hiring the wrong employee can be costly. By leasing IT resources, you’re contractually guaranteed the right mix of skills, eliminating the risk of mismatched hires.

13. ENSURE BUSINESS CONTINUITY FOR INVESTOR-DEPENDENT COMPANIES

If your business relies on investor milestones, we provide the IT resources needed to meet those critical deliverables and keep your stakeholders happy.

14. OPTION TO RETAIN LEASED TALENT FOR LONGER TERMS

Many of our clients choose to extend leases or even hire leased IT resources full-time, offering flexibility for longer-term projects or internal integration.

15. ENHANCE EFFICIENCY FOR PUBLICLY TRADED COMPANIES

For companies focused on efficiency ratios, leasing IT capacity is an excellent way to maintain performance without the long-term financial commitment of hiring permanent staff.

16. SAVE COSTS BY LEASING PART-TIME IT RESOURCES

Similar to point 6, leasing part-time IT resources across projects allows for even greater cost savings, optimizing your budget and maximizing output.

17. FLEXIBLE SUPPORT OPTIONS TAILORED TO YOUR NEEDS

We offer two support options: pre-paid capacity that adjusts to demand or an outsourced managed service for a fixed monthly fee, ensuring you have ongoing IT support when you need it.

18. BOOST PRODUCTIVITY WITH PROJECT VARIETY

Changing environments or projects can enhance productivity for IT professionals. Leasing allows them to move between projects, keeping their skills sharp and motivation high.

19. ACCESS EXPERT PROJECT MANAGEMENT AND CONSULTING

Need leadership to drive your project forward? We can supply experienced Project Managers, Scrum Masters, or specialized solution consultants to guide your team to success.

20. WORK WITH A TEAM PASSIONATE ABOUT TECHNOLOGY

At the core of our business is a passion for technology and project management. We love what we do, and it shows in the high-quality service we deliver.

Ready to take your business to the next level?

It’s time to outsource and lease IT resources. Contact us today to improve efficiency, reduce costs, and meet your goals with expert help.

Read More

Streamline your recruitment efforts with RPO: The key to efficiency and cost-effectiveness

Are you struggling to manage your recruitment processes effectively? If so, Recruitment Process Outsourcing (RPO) could be the solution you need. RPO is a preferred method for many companies due to its numerous advantages in optimizing recruitment and enhancing efficiency. This approach not only helps in acquiring new employees but also offers a comprehensive understanding of your company's operations and builds strong relationships with hiring managers.

What is Recruitment Process Outsourcing (RPO)?

Recruitment Process Outsourcing (RPO) is a strategic partnership where an external provider manages part or all of the recruitment process for a company. Unlike traditional recruitment, RPO involves a deeper integration with the company's teams, leading to a more efficient and streamlined process. Here’s why RPO stands out:

Direct access and quick feedback

In a traditional recruitment setup, recruiters often face communication discrepancies and delays when dealing with multiple hiring managers. They might be dismissed with vague responses like "I don't have time now," which hampers their efficiency. With RPO, you'll have direct access to hiring teams and can address their needs promptly. This leads to:

  • Reduced delays in candidate evaluation.
  • Quick and precise feedback on potential hires.
  • Efficient recruitment process with fewer obstacles.

Added value and efficiency

One of the main advantages of RPO is the added value it provides. RPO recruiters work closely with hiring managers to understand their specific needs and requirements. This results in:

  • Reduced time-to-fill vacant positions.
  • Increased efficiency in candidate selection.
  • Improved accuracy in hiring decisions.

Financial benefits

From a financial perspective, RPO can be more cost-effective compared to traditional recruitment methods. The cost benefits include:

  • Reduced recruitment costs due to streamlined processes.
  • Lower time-to-hire, which saves money.
  • Cost comparison data in our presentation (see slide no. 4) illustrates the percentage by which RPO can be cheaper than traditional methods.

Additional benefits of Recruitment Process Outsourcing (RPO)

RPO offers several other benefits that contribute to overall recruitment success:

  • Saves time for your internal team by handling the recruitment process and communication.
  • Eliminates the need for an internal recruiter.
  • Assists in setting up efficient recruitment processes.
  • Trains team leaders to enhance recruitment practices.
  • High motivation from RPO recruiters to make successful placements.
  • Improved candidate experience, as candidates interact with a dedicated representative rather than multiple agencies.
  • Enhanced market impression with a single point of contact for candidates.

Conclusion

If you want to recruit efficiently, reduce costs, and enhance your company's competitive edge in the coming year, consider adopting Recruitment Process Outsourcing (RPO). This strategy not only streamlines the recruitment process but also brings significant financial and operational benefits.

Ready to transform your recruitment process? Explore the advantages of RPO and see how it can elevate your company's efficiency and effectiveness.

Read More

Contact

    Copyrights © 2023 Snapstack

    Scroll to Top