4 ms·

If these were true, how would a company protect against such attacks? Esp. family members or vulnerable employees

• sandworm101 8y ago
  There is training, but basically all of if surrounds not being an idiot with strangers. Aside from people accepting bribes, most of these stings involve the target trying to impress someone. They brag. They think this new person might help them land a job in the future. Or: That pretty girl you met online ... she isn't in to you. The military deals with this issue through other means, mainly by trying to prevent employees becoming vulnerable in the first place. Living in secure housing with stable costs of living. Retirement planning / pensions. Not allowing people to fall into stupid dept (payday loans etc). And making sure employees feel valued enough that they want to stay with the company. An employee who feels secure in their position, who sees a clear road to advancement within the organization, doesn't feel the need to brag to strangers. Corporations would do well to consider these tactics.
• teachrdan 8y ago
  This can be properly understood as a spearphishing attack. You would handle it in the exact same way: security awareness training to minimize data leakage, even if, in this case, the data in question isn't financial (for example) but personally and professionally damaging.