Accessibility Statement Skip Navigation
  • Why PRWeb
  • How It Works
  • Who Uses It
  • Pricing
  • Login
  • GDPR
  • Create a Free Account
Return to PRWeb homepage
  • News
  • Resources
  • Contact
When typing in this field, a list of search results will appear and be automatically updated as you type.

Searching for your content...

No results found. Please change your search terms and try again.
  • News in Focus
      • Browse News Releases

      • All News Releases
      • Multimedia Gallery

      • All Multimedia
      • All Photos
      • All Videos
  • Business & Money
      • Auto & Transportation

      • Aerospace, Defense
      • Air Freight
      • Airlines & Aviation
      • Automotive
      • Maritime & Shipbuilding
      • Railroads and Intermodal Transportation
      • Supply Chain/Logistics
      • Transportation, Trucking & Railroad
      • Travel
      • Trucking and Road Transportation
      • View All Auto & Transportation

      • Business Technology

      • Blockchain
      • Broadcast Tech
      • Computer & Electronics
      • Computer Hardware
      • Computer Software
      • Data Analytics
      • Electronic Commerce
      • Electronic Components
      • Electronic Design Automation
      • Financial Technology
      • High Tech Security
      • Internet Technology
      • Nanotechnology
      • Networks
      • Peripherals
      • Semiconductors
      • View All Business Technology

      • Entertain­ment & Media

      • Advertising
      • Art
      • Books
      • Entertainment
      • Film and Motion Picture
      • Magazines
      • Music
      • Publishing & Information Services
      • Radio & Podcast
      • Television
      • View All Entertain­ment & Media

      • Financial Services & Investing

      • Accounting News & Issues
      • Acquisitions, Mergers and Takeovers
      • Banking & Financial Services
      • Bankruptcy
      • Bond & Stock Ratings
      • Conference Call Announcements
      • Contracts
      • Cryptocurrency
      • Dividends
      • Earnings
      • Earnings Forecasts & Projections
      • Financing Agreements
      • Insurance
      • Investments Opinions
      • Joint Ventures
      • Mutual Funds
      • Private Placement
      • Real Estate
      • Restructuring & Recapitalization
      • Sales Reports
      • Shareholder Activism
      • Shareholder Meetings
      • Stock Offering
      • Stock Split
      • Venture Capital
      • View All Financial Services & Investing

      • General Business

      • Awards
      • Commercial Real Estate
      • Corporate Expansion
      • Earnings
      • Environmental, Social and Governance (ESG)
      • Human Resource & Workforce Management
      • Licensing
      • New Products & Services
      • Obituaries
      • Outsourcing Businesses
      • Overseas Real Estate (non-US)
      • Personnel Announcements
      • Real Estate Transactions
      • Residential Real Estate
      • Small Business Services
      • Socially Responsible Investing
      • Surveys, Polls and Research
      • Trade Show News
      • View All General Business

  • Science & Tech
      • Consumer Technology

      • Artificial Intelligence
      • Blockchain
      • Cloud Computing/Internet of Things
      • Computer Electronics
      • Computer Hardware
      • Computer Software
      • Consumer Electronics
      • Cryptocurrency
      • Data Analytics
      • Electronic Commerce
      • Electronic Gaming
      • Financial Technology
      • Mobile Entertainment
      • Multimedia & Internet
      • Peripherals
      • Social Media
      • STEM (Science, Tech, Engineering, Math)
      • Supply Chain/Logistics
      • Wireless Communications
      • View All Consumer Technology

      • Energy & Natural Resources

      • Alternative Energies
      • Chemical
      • Electrical Utilities
      • Gas
      • General Manufacturing
      • Mining
      • Mining & Metals
      • Oil & Energy
      • Oil and Gas Discoveries
      • Utilities
      • Water Utilities
      • View All Energy & Natural Resources

      • Environ­ment

      • Conservation & Recycling
      • Environmental Issues
      • Environmental Policy
      • Environmental Products & Services
      • Green Technology
      • Natural Disasters
      • View All Environ­ment

      • Heavy Industry & Manufacturing

      • Aerospace & Defense
      • Agriculture
      • Chemical
      • Construction & Building
      • General Manufacturing
      • HVAC (Heating, Ventilation and Air-Conditioning)
      • Machinery
      • Machine Tools, Metalworking and Metallurgy
      • Mining
      • Mining & Metals
      • Paper, Forest Products & Containers
      • Precious Metals
      • Textiles
      • Tobacco
      • View All Heavy Industry & Manufacturing

      • Telecomm­unications

      • Carriers and Services
      • Mobile Entertainment
      • Networks
      • Peripherals
      • Telecommunications Equipment
      • Telecommunications Industry
      • VoIP (Voice over Internet Protocol)
      • Wireless Communications
      • View All Telecomm­unications

  • Lifestyle & Health
      • Consumer Products & Retail

      • Animals & Pets
      • Beers, Wines and Spirits
      • Beverages
      • Bridal Services
      • Cannabis
      • Cosmetics and Personal Care
      • Fashion
      • Food & Beverages
      • Furniture and Furnishings
      • Home Improvement
      • Household, Consumer & Cosmetics
      • Household Products
      • Jewelry
      • Non-Alcoholic Beverages
      • Office Products
      • Organic Food
      • Product Recalls
      • Restaurants
      • Retail
      • Supermarkets
      • Toys
      • View All Consumer Products & Retail

      • Entertain­ment & Media

      • Advertising
      • Art
      • Books
      • Entertainment
      • Film and Motion Picture
      • Magazines
      • Music
      • Publishing & Information Services
      • Radio & Podcast
      • Television
      • View All Entertain­ment & Media

      • Health

      • Biometrics
      • Biotechnology
      • Clinical Trials & Medical Discoveries
      • Dentistry
      • FDA Approval
      • Fitness/Wellness
      • Health Care & Hospitals
      • Health Insurance
      • Infection Control
      • International Medical Approval
      • Medical Equipment
      • Medical Pharmaceuticals
      • Mental Health
      • Pharmaceuticals
      • Supplementary Medicine
      • View All Health

      • Sports

      • General Sports
      • Outdoors, Camping & Hiking
      • Sporting Events
      • Sports Equipment & Accessories
      • View All Sports

      • Travel

      • Amusement Parks and Tourist Attractions
      • Gambling & Casinos
      • Hotels and Resorts
      • Leisure & Tourism
      • Outdoors, Camping & Hiking
      • Passenger Aviation
      • Travel Industry
      • View All Travel

  • Policy & Public Interest
      • Policy & Public Interest

      • Advocacy Group Opinion
      • Animal Welfare
      • Congressional & Presidential Campaigns
      • Corporate Social Responsibility
      • Domestic Policy
      • Economic News, Trends, Analysis
      • Education
      • Environmental
      • European Government
      • FDA Approval
      • Federal and State Legislation
      • Federal Executive Branch & Agency
      • Foreign Policy & International Affairs
      • Homeland Security
      • Labor & Union
      • Legal Issues
      • Natural Disasters
      • Not For Profit
      • Patent Law
      • Public Safety
      • Trade Policy
      • U.S. State Policy
      • View All Policy & Public Interest

  • People & Culture
      • People & Culture

      • Aboriginal, First Nations & Native American
      • African American
      • Asian American
      • Children
      • Diversity, Equity & Inclusion
      • Hispanic
      • Lesbian, Gay & Bisexual
      • Men's Interest
      • People with Disabilities
      • Religion
      • Senior Citizens
      • Veterans
      • Women
      • View All People & Culture

  • Hamburger menu
  • Cision PRWeb provides efficient communication tools to continuously engage with target audiences across multiple online channels
  • Create a Free Account
    • ALL CONTACT INFO
    • Contact Us


      11AM ET Sunday – 8PM ET Friday

  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • News in Focus
    • Browse All News
    • Multimedia Gallery
  • Business & Money
    • Auto & Transportation
    • Business Technology
    • Entertain­ment & Media
    • Financial Services & Investing
    • General Business
  • Science & Tech
    • Consumer Technology
    • Energy & Natural Resources
    • Environ­ment
    • Heavy Industry & Manufacturing
    • Telecomm­unications
  • Lifestyle & Health
    • Consumer Products & Retail
    • Entertain­ment & Media
    • Health
    • Sports
    • Travel
  • Policy & Public Interest
  • People & Culture
    • People & Culture
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR
  • Send a Release
  • Sign up
  • Log in
  • Resources
  • RSS
  • GDPR

Social Engineering Still Biggest Data-Security Threat, Attorney Writes
  • USA - English


News provided by

Parness & Associates

Dec 18, 2017, 03:00 ET

Share this article

Share toX

Share this article

Share toX

John P. Hutchins
John P. Hutchins

Atlanta, GA (PRWEB) December 18, 2017 -- As companies strive for better data privacy and cyber security, they should keep in mind that social engineering—often in the form of simple con jobs—remains the biggest threat, cautions LeClairRyan attorney John P. Hutchins in a new post on the national law firm’s Law & Technology blog.

You may ask yourself, ‘Who would fall for this?’ But it works far more often than you might expect.

Post this

“There’s evidence to suggest that users are getting suckered by fake messages more and more every year,” writes Hutchins, co-leader of LeClairRyan’s Technology & Innovations practice team and a shareholder in its Atlanta office. According to Verizon’s 2016 Data Breach Investigation Report, in fact, 30% of phishing messages were opened by their intended targets, and about 12% of recipients then went on to click malicious attachments or links.

In the Dec. 5 post (“Despite Equifax Breach Causes, Social Engineering Still Biggest Threat to Data Security”), Hutchins notes that complex technical issues related to cyber security and data privacy have been the focus of recent high profile data breaches, citing the massive data breach revealed by Equifax this past September as an example. While early media reports largely focused on the company’s alleged failure to apply a patch to fix a security hole in open source software called Apache Struts, Hutchins writes, many experts are not so sure this actually caused the breach. “Most security breaches are not the result of sophisticated technical hacks,” he writes. “The fact is that social engineering is the top method of gaining access to corporate computer systems and the sensitive data they hold.”

In the post, Hutchins describes common ways in which employees can be tricked into divulging confidential information such as passwords or ID numbers. Employees might, for instance, double-click email attachments that contain malicious code, thereby giving attackers access to computer systems and valuable data. Or they could be suckered into interacting with unexpected pop-ups, fake apps or games that request profile information and/or include malware. Social engineers are creative, the attorney writes, and are continually coming up with new twists on old techniques such as phishing emails or fake texts (“SMiShing”).

However, Hutchins writes, data thieves are also perfectly willing to take low-tech approaches such as dumpster diving for documents that should have been shredded, or just visiting an office and pretending to be a vendor, a rep from building management/security, a new employee who needs help, or someone from another office in the company. To illustrate, Hutchins cites the example of a “lurker” standing in the hallway carrying stacked boxes. “As you approach, he appears to clumsily reach for his key-card,” Hutchins writes. “You swipe yours instead, kindly holding the door for him as he walks in with his boxes. A con job like this gives the innocent-looking lurker access to files, the network, or other sensitive information or infrastructure.”

Simple impersonation tends to work because it leverages the human tendency to trust others—especially if they display credentials such as uniforms, badges or ID cards. “But these markers of legitimacy can pretty easily be faked,” Hutchins writes.

His post also covers common phone scams such as the infamous CEO/manager scheme. Here, attackers gather publicly available info about the target company, the CEO and those managers and employees who may be authorized to handle cash transfers. “The schemers use this data to make a call to a target employee, impersonating the CEO, and coercing the employee into making an urgent and high-dollar cash transfer to a designated bank account,” Hutchins writes. “You may ask yourself, ‘Who would fall for this?’ But it works far more often than you might expect.”

In the post, he advises that almost all social engineering depends on attackers establishing familiarity or authority to build trust. Companies should watch out for strangers making liberal use of company lingo, or mouthing details that seem to verify their claimed identities but that, upon further investigation, fall apart, he writes. “Social engineers like to try to create a sense of urgency, so the victim will act faster than usual and make the mistake the attacker is banking on,” Hutchins notes in the post. “Most often, if the target will take a few seconds to think it through, he or she will get the feeling that something’s not quite right, and that instinct is usually correct. Or if the target will make that one extra call to verify, the scammer claiming to be from ‘building maintenance’ will suddenly disappear.”

In conclusion, Hutchins cautions that social engineering is still very much alive. “Your company is most likely to be hit by a debilitating data breach because your employee base isn’t well-enough-equipped to recognize social engineering when it happens,” he writes. “That leaves your company at serious risk, regardless of how up-to-date your technical systems are. Regular and high quality training is readily available, and it is absolutely essential.”

Launched earlier this year, LeClairRyan’s cross-office, cross-disciplinary Technology & Innovations team focuses on ramping up service for companies that sell or are heavily dependent upon technology. Members include attorneys with broad experience in tech-related issues associated with transactions, litigation, IP, communications, regulations/compliance, deal making and more.

The full blog post is available at
https://lawandtechnologyblog.com/despite-equifax-breach-causes-social-engineering-still-biggest-threat-to-data-security/

About LeClairRyan
As a trusted advisor, LeClairRyan provides business counsel and client representation in corporate law and litigation. In this role, the firm applies its knowledge, insight and skill to help clients achieve their business objectives while managing and minimizing their legal risks, difficulties and expenses. With offices from coast to coast, the firm represents a wide variety of clients nationwide. For more information about LeClairRyan, visit http://www.leclairryan.com.

###

Press Contacts: At Parness & Associates Public Relations, Bill Parness, (732) 290-0121, bparness(at)parnesspr.com.

Bill Parness, Parness & Associates, +1 (732) 290-0121, [email protected]

Modal title

Contact PRWeb

  • 11AM ET Sunday – 8PM ET Friday
  • Contact Us

About PRWeb

  • About PRWeb
  • Partners
  • Partnership Programs
  • Editorial Guidelines
  • Resources

Why PRWeb

  • Why PRWeb
  • How It Works
  • Who Uses It
  • Pricing

Accounts

  • Create a Free Account
  • Log in
  • Contact Us

Do not sell or share my personal information:

  • Submit via [email protected] 
  • Call Privacy toll-free: 877-297-8921

Contact Cision

Products

About

My Services
  • All News Releases
  • Online Member Center
  • ProfNet
Cision Distribution Helpline
888-776-0942
  • Legal
  • Site Map
  • RSS
  • Cookie Settings
Copyright © 2025 Cision US Inc.