Handi…. capable? 

What role do physical disabilities play in the area of Social Engineering?

Would a physically disabled person have an advantage or a disadvantage during a Social Engineering engagement?

Are physically disabled persons perceived more trustworthy, less trustworthy, or neutral versus their non-disabled counterparts?

Should a physically disabled Social Engineer acknowledge his disability or ignore it?

These controversial questions will be the topic of this months newsletter.

 
In her study, "Social Sterotyping of the Physically Handicapped", Dr. Nancy Weinberg states that it appears that physically disabled people are seen as 
personally good to the general public.  If that perception is true then a social engineer can utilize a physical disability to automatically gain trust and build rapport.

A physically disabled SE can capitalize on these things and gain a great advantage. Someone who is perceived as a good person and  socially unskilled will be unassuming. Often the target would never assume an attack would come from someone like this.

Not only is the physically disabled Social Engineer more unassuming, people naturally go out of their
way to help, and sometimes over-help, persons with visible physical disabilities. A study entitled, "Perceived distinctiveness of the handicapped." states that automobile drivers, when given the chance to assist a physically disabled driver versus a non-disabled
driver, chose to help the disabled person more frequently.

Studies involving retail scenarios also reveal that physically disabled individuals receive more help and assistance and often receive what is described as “over-help”.

The Dark Side

Understanding and exploiting people’s natural desire to help and assist  others who have a physical disability gives the disabled Social Engineer a huge advantage. People  already want to help and even more so those who are physically disabled.

How should the disabled Social Engineer go about acknowledging the elephant in the room? Should you
ignore your disability and pretend it doesn’t exist, or should you mention it and be open about it?

Studies in job applicants have found that applicants who acknowledge their disability upfront are
perceived more favorably than those who don’t mention it or mention it at the close of an interview.

It would then be logical to assume that during a Social Engineering engagement, making mention of your
disability during the initial confrontation is the best way to go. Although the smart social engineer will do so in very subtle ways and some may perceive the mention as pleas for attention.

To Fake or Not To Fake

Don’t have a physical disability and don’t want to fake one? No problem, studies have shown that partners of physically disabled individuals are perceived as “significantly more trustworthy and  nurturant” than those partners of non-disabled individuals.

Use this knowledge to your advantage. Bring up your wheelchair bound wife, or even better, let a picture slip out of your wallet. While working  this angle, it leans greatly in your favor to refer to your disabled partner as heroic or disabled and never as pathetic.

If faking a disability seems too offensive to you, then you can go always go the broken arm or broken leg route with a fake cast and these studies will still apply that you can create feelings of sympathy as you struggle.

 

Like anything in life, there are pros and cons, positives and negatives, yin and yang. It appears that a truly physically disabled Social Engineer, one that is faking it, or even one who may not possess the disability but is a partner of a physically disabled individual has a distinct advantage during an engagement. The psychological advantage you gain simply from being is an amazing head start and offers an edge over a non-disabled individual. Using physical disabilities to your advantage, you can appear more trustworthy, appear as a good person, and people instinctively want to help you. What
more could a Social Engineer ask for?

 

Written by Eric "Urbal" 


 

 

Looking for Professional Social Engineering Services?

Social-Engineer.Org is branching out with our new website www.Social-Engineer.Com

We are providing some of the following services:

 

  • Social Engineering Pentests

 

  • Social Engineering Risk Assessments

 

  • Professional Information Gathering Services

 

For more information on any of the above or how we might be able to help you protect your company from malicious social engineers contact us at:

[email protected]

 

 

 


 

spy Sponsors