Social Engineering in the underground Sample Clauses

Social Engineering in the underground economy In a criminal ecosystem so well diversified and driven by the goals set by non-technical entrepreneurs, the process of intelligence gathering becomes focused. What actually matters nowadays is to set up an attack based on quality and not quantity [115], as an example a huge database dump is not anymore useful to create an efficient phishing, if few key pieces of information are enough. There is clearly some kind of asymmetry between the dark market value of information versus the value perceived by the victims. One of the biggest examples of this asymmetry is the common misunderstanding that, contrary to common belief, the human factor is one of the most profitable targets. The SE enlarged then the context of cybercrime-as-a-service because competences commonly associated with other, seemingly unsophisticated types of crimes and frauds have been able to enter the cybercrime market successfully with specific skills. Either resorting to direct interpersonal contact when needed, making use of the capabilities offered by the tools supplied by hackers, or even silently and passively exploiting common, publicly accessible data repositories and services.