Question

explain HOW you would obtain as many user credentials as possible from a college. Please do some research on the most successful social engineering attacks, and design your attack specifically to that college. Be very thorough in your procedure, noting all details, since successful attacks consider all possibilities. This is a thought and research topic, please do not actually try to attack the campus with a social engineering attack. I don't need my job any harder!!

Answer 1

Social engineering attacks are psychological manipulation of individuals to obtain their confidential information. One technique of attack is to create a false alarm that tells the user that their credentials are hacked. Such a thing can be done over email by sending false requests to reset the user's credentials as the credentials are hacked. The email sent should look genuine and reliable to gain the user's trust. If the user can be manipulated into believing that his credentials are actually compromised, he may using this fake email to reset his credentials. The fake email may contain links to the attackers website where he is made to enter his old credentials as well as a set of new ones. The existing credential information can be obtained by the attacker in this way.