Social Engineering: Khayaano Maskaxeeda Balaayiin Doolar Ka Gubtay Caalamka!
Waa maxay Social Engineering?
Social engineering waa xeelad nafsiyeed oo ay dadka khiyaamada ku xeel dheer adeegsadaan si ay uga helaan xog ama fursad ay ku weeraraan nidaamyo amni. Waxaa lagu saleeyaa khiyaano nafsi ah iyo kalsooni been ah.
Talaabooyinka ay adeegsadaan dadka samaynaya social engineering-ka
- Baadhitaan (Research): Soo ururinta macluumaadka ku saabsan qofka ama shirkadda bartilmaameedka ah.
- Xiriir (Engagement): La xiriirid dhibbanaha iyada oo loo marayo email, telefoon, ama kulanno toos ah.
- Cabsigelin (Exploitation): Abuurid cabsi ama in degdeg lagu furo qofka si uu u bixiyo xog muhiim ah.
- Fulinta (Execution): Weerarka dhabta ah ee lagu dhaco xogta ama lacagta dhibbanaha.
Tusaalooyin Caan ah
Email Phishing: Fariimo been ah oo laga dhigo kuwa ka socda shirkado la isku halayn karo sida Ethio Telecom ama Amazon si qofka loogu khiyaaneeyo inuu bixiyo xogtiisa.
BBC News – Twitter Hack |
New York Times
Xeeladaha ugu badan ee ay adeegsadaan
- Phishing: Emailo been ah oo looga golleeyahay in la xado xogta dadka.
- Pretexting: Been abuur sumcad leh si xog loo helo, sida in la iska dhigo IT support.
- Baiting: Adeegsiga software ama USB “free” ah si loogu dhex dhaco nidaam shirkadeed ama shaqsiyeed.
Guntii iyo Gabagabadii
Social engineering waa halis dhab ah oo kharashyo balaayiin doolar ah keentay caalamka. Waxay ka faa’iidaysataa daciifnimada aadanaha — sida ayadoo ku abuuraysa shaqsiga ama shirkada kalsooni xad dhaaf ah ama cabsi saaid ah.
Si aad uga badbaado:
- Had iyo jeer xaqiiji cidda ku soo wacday ama email kuu soo dirtay.
- Isticmaal Multi-Factor Authentication (MFA).
- Kor u qaad wacyigaaga iyo kan dadka kuu dhow ee isticmaalaya internetka.
Ilaha iyo Tixraacyada Dibadda ah ee aad si faahfaahsan uga dheehan karto mawduucan waa kuwan hoose
- OWASP Prevention Guide
- Kaspersky Social Engineering
- CISA Tips
- NIST Guidelines
- Europol Cybercrime Reports
- ▶ YouTube: Social Engineering Explained
FAQs
1. Sidee baan isaga difaaci karaa social engineering?
Iska hubi cidda ku soo wacday, ha furin emailo shaki leh, kuna tiirsanaw adeegyo leh amni sare sida MFA.
2. Ma jiraan barnaamijyo kaa caawin kara?
Haa, adeegyada amniga ama anti-virus yada ah sida Kaspersky, Norton, iyo Bitdefender waxay bixiyaan digniino phishing iyo training awareness.
3. Maxaa sababa in dad badani ugu dhacaan?
Sababta ugu weyn waa kalsooni iyo wacyi la’aan dhanka amniga dijitaalka ah.
