How to Gather Information
From Learn to be a true Social Engineer
There are many different ways of gaining access to information from a company. Some of the options available to a social engineer can range from using the telephone, intrusion within company property or using the Internet to obtain information. A social engineer can use many small pieces of information to combine into a useful vulnerability of a system. Information can be important whether it comes from the janitor’s office or from the CEO’s office; each piece of paper, employee spoken to or area visited by the social engineer can add up enough information to attain access to sensitive data and resources of the company. The lesson here is all information, no matter how insignificant the employee believes it to be, may assist in creating a vulnerability for a company and an entrance for a social engineer.