SOCIAL ENGINEERING AND PERSONAL DATA

Abstract

In today's information environment, there are more threats and dangers to the security of computer users. One of these threats that is very widespread and without the chance to zoom out in the future, is certainly stealing personal data. To occur, the malicious men are ready for extensive preparation, research of individuals and companies, waiting for the right moment to invade and achieve their goals, so it is necessary to spot some of the most distinctive fraud used by social engineering and their genesis on the Internet and social networks.  Usage of social networks is critical of the security and privacy of users. A large amount of information published and often publicly shared on users’ profile, is increasingly drawing the attention of the attackers. Instead of the attacker initiating contact with the victim, the method of reverse social engineering is applied for the victim to be lured to the first contact with the attacker, which results in a high level of trust between the victim and the attacker. Integration of social engineering in these attacks is a new, more complex threat that attempts to take personal data from internet users that is easy to trade with or to cash in. In order to identify these attacks in time, it helps to see their characteristics, and in order to see the problem fully, it is necessary to know the true value of personal information and what they represent in the world of black Internet markets.