Phishing and Social Engineering
This type of phishing uses text messages to trick victims into clicking a malicious link or sharing information.
What is SMS phishing (smishing)?
This term describes AI-generated audio, video, or images that convincingly imitate a real person.
What is a deepfake?
This authentication method requires two or more different types of evidence, such as a password plus a code from an authenticator app.
What is multi-factor authentication (MFA)?
You accidentally click a suspicious link at work. The safest action is to do this rather than hide the mistake.
What is report the incident immediately?
DAILY DOUBLE! This simple rule reminds you to pause before acting on an unexpected request for money, credentials, or sensitive information.
What is STOP?
DAILY DOUBLE! In this social engineering tactic, an attacker creates a false sense of urgency to pressure a victim into acting without thinking.
What is phishing?
This technique can make an AI-generated voice sound like a specific person and is increasingly used in impersonation scams.
What is voice cloning/impersonation?
This is the recommended way to handle a unique password for every account without having to memorize them all.
What is using a password manager?
A security incident should be reported through this channel designated by your organization.
What is the report phishing button/send email to infosec_infrastructure@livedigi.com/call security manager?
This term describes software designed to damage disrupt or gain unauthorized access to systems.
What is malware?
This attack targets people rather than technical vulnerabilities by exploiting trust, authority, fear, curiosity, or helpfulness.
What is social engineering?
A video call appears to show your executive asking for an urgent wire transfer, but the video and voice were generated or altered by AI. This is an example of what?
What is a deepfake impersonation scam?
Data security is about keeping company and customer information safe and uses these are 3 key principles.
What is CIA/Confidentiality, Integrity, Availability?
If an employee notices unusual account activity but has no proof of a breach, should they wait for confirmation before reporting it?
What is no, report it immediately?
The CEO is being targeted in a phishing attempt. What is this type of phishing attempted commonly referred to in a enterprise environment?
What is BEC/Business Email Compromise?
This phishing technique uses a QR code to send victims to a malicious website, often hiding the destination behind a seemingly harmless image.
What is quishing (QR phishing)?
What is one of the major risks of entering sensitive company data into an unapproved AI tool?
What is data exposure?
This security tool acts as a digital vault?
What is a password manager?
What details should an employee include when reporting a suspicious email to the security team?
What are the sender, subject, and suspicious content?
DAILY DOUBLE! This principle says users should receive only the minimum access necessary to perform their job.
What is least privilege?
An attacker researches an employee's role, coworkers, projects, and interests before sending a highly personalized phishing message. This targeted technique is known as what?
What is spear phishing?
A caller uses an AI-cloned voice of a company executive to request an urgent payment. What verification step can help defeat this type of attack?
What is independently verifying the request through a trusted channel?
Full Name, Address, Social Security Number, Phone Number. These types of information are referred to as…
What is PII/Personally Identifiable Information?
During an active security incident, why should employees avoid independently investigating or changing affected systems before the security team gives instructions?
What is to preserve evidence and prevent further damage?
A suspicious email passes an organization's email filters and appears to come from a trusted colleague. The recipient notices an unusual request and reports it anyway. This demonstrates what core security principle?
What is verify before you trust?