The Stranger Who Knew Too Much

A stranger contacts you and seems to know everything about your workplace, colleagues, and projects. But how did they get all that information?

Watch “The Stranger Who Knew Too Much” (1:08)

Transcript

A stranger contacts you and seems to know everything about your workplace, colleagues, and projects. But how did they get all that information?

Here we discover how cybercriminals collect information from social media, public profiles, and online activity to create convincing messages and trick employees.

This technique is called Social Engineering, where attackers use personal information and trust to manipulate people into sharing sensitive details or taking unsafe actions.

Key lessons

• Be careful about the personal information you share online.
• Avoid sharing confidential workplace details on social media.
• Don't trust someone just because they know your colleagues or projects.
• Verify unexpected requests through trusted channels.
• Be cautious with urgent emails and suspicious attachments.
• Report unusual messages to your IT or security team.

PhishFoil helps teams recognise social engineering and other cyber threats through short, simple, and engaging security awareness videos.

Subscribe for more bite-sized cybersecurity lessons.