Even Hackers and Security Experts Fall For Social Engineering

IT security professionals and even hackers can become targets for clever social engineering operations, a recent study revealing that some of them easily share account credentials after a few conversations.

You might think that pros would be more aware of these attempts but a cleaver study conducted by Sabina Datcu from Bitdefender revealed that 13% of security specialists and 7% of cybercriminals are willing to share passwords for various online accounts after just a few minutes of conversation.

According to ReadWrite, 100 IT security professionals and hackers came in contact with the fake profile of the 25-year-old woman that recommended herself as being an IT security worker or a simple IT worker, depending on the subjects.

The specialists were selected from a dedicated social network, while the bad guys were picked from a hacking forum.

Over the course of several weeks, more than 75% of the respondents from both sides supplied private data such as addresses, phone numbers, and details on their family members, all of which being perfect for someone who intends on launching and identify theft operation.

Some also revealed strategies and future plans of the companies they work for and even credit card info belonging to others.

“Both the good and the bad guys give in to the illusions of safety created by the online environment,” revealed Sabina Datcu, Bitdefender E-Threats Analysis and Communication Specialist.

“This second virtual life is governed by a totally different set of rules. You wouldn't tell a person on the street your password after just a few minutes of conversation, would you?. In the online environment however, you might.”

“The conclusions are surprising, considering the profiles of the people subjected to the experiment. Hackers and security experts know the risks involved in such behaviors, nevertheless, they give in to temptation,” she concludes.

If the numbers are accurate and even those who should know better can easily become victims, what is there left to be said about regular internauts. The internet is becoming an increased threat to our personal lives so make sure you start treating it as you would treat any menace in real life.

Note. The quotes are translated from a Romanian article that's available here