ABSTRACT

This chapter reviews several instances of social engineering being employed to commit criminal acts, which violate laws that the agencies are responsible for enforcing. The social engineering attack is going on and in 2017 the Internet Crime Complaint Center received approximately 11,000 complaints related to tech support fraud. Business Email Compromise/Email Account Compromise is a sophisticated scam targeting both businesses and individuals performing wire transfer payments. The scam is frequently carried out when a perpetrator compromises legitimate business email accounts through social engineering or computer intrusion techniques to conduct unauthorized transfers of funds. Cybercriminals utilize social engineering techniques to obtain employee credentials to conduct payroll diversion attacks. Cybercriminals target employees through phishing emails designed to capture an employee’s login credentials. There have been countless social engineering attacks, some of which merely amounted to delinquency while others have had a global financial and business impact.