Module 1: Introduction to Social Engineering

Overview of Social Engineering

The Psychology of Persuasion and Influence

The Importance of Social Engineering in Cybersecurity

Case Study: Social Engineering Attack on a Nigerian Financial Institution

Lab 1: Introduction to Social Engineering Tools

Lab 2: Simulating Basic Social Engineering Attacks

Lab 3: Analyzing Real-World Social Engineering Scenarios

Module 2: Information Gathering and Reconnaissance

OSINT (Open Source Intelligence) Techniques

Using Social Media for Reconnaissance

Information Gathering from Public Sources

Creating Detailed Reconnaissance Reports

Case Study: Reconnaissance on a Kenyan Technology Company

Lab 1: Using OSINT Tools for Information Gathering

Module 3: Phishing Attacks

Types of Phishing Attacks (Email, Spear Phishing, Whaling)

Crafting Phishing Emails and Websites

Phishing Tools and Frameworks

Detecting and Mitigating Phishing Attacks

Case Study: Phishing Campaign Targeting a South African Bank

Module 4: Pretexting and Impersonation

Introduction to Pretexting

Developing and Using Pretexts

Impersonation Techniques

Case Study: Impersonation Attack on a Nigerian Telecom Company

Lab 1: Developing Pretext Scenarios

Lab 2: Practicing Impersonation Techniques

Lab 3: Simulating Pretexting Attacks

Module 5: Baiting and Quid Pro Quo Attacks

Introduction to Baiting

Creating and Distributing Bait

Quid Pro Quo Attacks

Case Study: Baiting Attack on a Kenyan Government Office

Lab 1: Designing Bait for Social Engineering Attacks

Lab 2: Implementing Quid Pro Quo Scenarios

Lab 3: Conducting a Baiting Attack Simulation

Module 6: Physical Social Engineering

Tailgating and Piggybacking

Dumpster Diving

Using Fake IDs and Badges

Case Study: Physical Social Engineering Attack on a South African Corporate Office

Lab 1: Practicing Tailgating Techniques

Lab 2: Conducting a Dumpster Diving Exercise

Lab 3: Simulating Physical Access Scenarios

Module 7: Social Engineering and Cyber Fraud

Types of Cyber Fraud (Phishing, Vishing, Smishing)

Financial Fraud and Identity Theft

Social Engineering in Business Email Compromise (BEC)

Case Study: Cyber Fraud Attack on a Nigerian SME

Lab 1: Simulating a Vishing Attack

Lab 2: Creating a Smishing Campaign

Lab 3: Investigating a Cyber Fraud Incident

Module 9: Countermeasures and Defenses

Identifying Social Engineering Attacks

Implementing Security Awareness Training

Technical and Administrative Controls

Incident Response to Social Engineering Attacks

Case Study: Developing a Security Awareness Program for a South African Company

Developing and Using Pretexts

You are unauthorized to view this page.