Английский для студентов, изучающих информационную безопасность. Учебное пособие

6. How can scammers gain remote access to your computer?

a)By sending phishing emails

b)By running keylogging and hacking software

c)By asking for your login information

d)By sending pop-ups on websites

Vocabulary manipulating [mə'nɪpjəleɪtɪŋ] – манипулирование personal ['pɜːs(ə)n(ə)l] – личный

confidential [ˌkɔnfɪ'den(t)ʃ(ə)l] – конфиденциальный request [rɪ'kwest] – запрос, просьба

phishing ['fɪʃɪŋ] – фишинг, вид интернет-мошенничества guise [gaɪz] – облик, личина, образ

sub-heading [sʌb'hedɪŋ] – подзаголовок webpage – страница в интернете download ['daunləud] – загружать

software ['sɔftweə] – программное обеспечение remoteaccess [rɪ'məut 'ækses] – удалённый доступ log in – зарегистрироваться

donation [dəu'neɪʃ(ə)n] – пожертвование charitable ['ʧærɪtəbl] – благотворительный

You may think you're not the sort of person to be fooled by a scam but often thescammers haveemployedsubtlewaysand means inwhich tobaityou.

With the rise of wider forms of communication, through social media and so on, comes a new wave of threats called social engineering. There are many forms of social engineering, so let's have a look at what you're up against, and how to combat it.

Social engineering is the new modern way of manipulating people to give up their personal and confidential information. It comes in many guises and under different sub-headings, such as Phishing and the like, but it's essentially all a form of social engineering. Essentially, the scammer will take your human nature and responses and turn it against you for their own gain.

The kind of information the scammer is after does vary, depending on the type of scam being used, but for the most part they're usually after your passwords, bank and credit card details, or login information in order to gain any sort of financial data.

You're probably more familiar with social engineering that you suspect, even if you're new to the term. Recall the emails from someone, usually based in Nigeria, who has come into a fortune in the billions and for some

41

inexplicable reason wants to put the money in your bank account. Needless to say, the money was never there in the first place and should you go through the process you will eventually be persuaded to hand over some banking information which the scammer can then use to steal from you.

There aren't too many Nigerian scams these days, mostly you get a phone call from someone claiming to be from Microsoft or some other well-known company, who insists that they are tracking a virus or other harmful malware that's currently residing on your computer. They ask you to visit a webpage and download a piece of software that will allow them remote access to your computer. When in, they run a script that displays a wealth of useless information on the screen whilst in the background they run keylogging and hacking software to obtain your online banking details. They can even ask you to log into your bank while connected to make sure everything is working.

Other common social engineering tactics include emails from a friend, who has been hacked, with the scammer masquerading as them. It could be an email claiming to be from your bank, an urgent request for help or someone asking for a donation to a charitable organisation. Be wary, and question everything.

I. ELICITING THE VOCABULARY

1.Fill in the gaps using the words from the box.

Information, employed, personal, up, bank, passwords, wave, combat, scammer, new, account, social, engineering, masquerading, threats, of, confidential

With the rise of wider forms of communication, through social media and so on, comes a _____(1) _____(2) _____(3) _____(4) called social engineering. There are many forms of social engineering, so let's have a look at what you're _____(5) against, and how to _____(6) it.

Social engineering is the new modern way of manipulating people to give up their _____(7) and _____(8) _____(9). It comes in many guises and under different sub-headings, such as Phishing and the like, but it's essentially all a form of social engineering. Essentially, the _____(10) will take your human nature and responses and turn it against you for their own gain.

The kind of information the scammer is after does vary, depending on the type of scam being used, but for the most part they're usually after your

_____(11), bank and credit card details, or login information in order to gain any sort of financial data.

42

You're probably more familiar with _____(12) _____(13) that you suspect, even if you're new to the term. Recall the emails from someone, usually based in Nigeria, who has come into a fortune in the billions and for some inexplicable reason wants to put the money in your _____(14)

_____(15). You may think you're not the sort of person to be fooled by a scam but often the scammers have _____(16) subtle ways and means in which to bait you.

Other common social engineering tactics include emails from a friend, who has been hacked, with the scammer _____(17) as them.

2.Match the words with their definitions.

43

II. COMPREHENSION

1.Read the text again and answer the questions

1.What is social engineering and how does it work?

2.What kind of information are scammers usually after in a social engineering scam?

3.How do scammers use human nature to their advantage in social engineering scams?

4.Can you give an example of a common social engineering tactic used

by scammers?

5.Why do scammers often want people to react quickly to their re-

quests?

6.What should you do if you receive an email from a friend who has been hacked, according to the text?

7.Are foreign offers for financial rewards or lottery funds usually real

or fake?

8. What can you do to combat social engineering tactics?

2. Guess whether the sentences are true or false. If the sentences are false, correct them.

1.Social engineering is a new type of threat that has emerged with the rise of social media.

2.Social engineering is a form of manipulation that aims to get people

to give up their personal and confidential information.

3.Scammers are only interested in financial data such as bank and credit card details.

4.Nigerian scams are still common these days.

5.Scammers often claim to be from well-known companies such as Microsoft.

6.Scammers can use keylogging and hacking software to obtain your online banking details.

7.Emails from friends asking for help are always genuine.

8.Scammers want you to react quickly and use high-pressure tactics.

9.It's important to take a moment to figure out what's going on and not fall for any high-pressure tactics.

10.Lottery funds from other countries are always genuine.

3. Read the dialogue about some kind of fraud and make up a situation of your own.

Detective Jones: Hi there, can you tell me what happened to you, Mr. Smith?

44

Mr. Smith: Yes, officer. I got a phone call from someone who said they were from my bank and told me that something strange was happening in my account.

Detective Jones: What did the person ask you to do?

Mr. Smith: They asked me to log in to my online banking and check some information to make sure everything was ok.

Detective Jones: Did you do it?

Mr. Smith: Unfortunately, yes. I thought it would be good to doublecheck.

Detective Jones: Ok. Did you notice anything weird while doing this? Mr. Smith: Well, they were very insistent and kept telling me how im-

portant it was to act fast. Looking back, I should have been more careful. Detective Jones: Scammers are experts at using people's trust and emotions.

Theyknowhowtomakeyoufeellikeyouneedtodosomethingrightaway. Mr. Smith: I learned that the hard way. Is there anything else I can do to

protect myself?

Detective Jones: Sure! First of all, always be careful with unsolicited emails, calls or messages that ask for your personal information. Second, take the time to think before making decisions about sensitive data. Don't let anyone pressure you into doing something you're not comfortable with. Third, use strong passwords and two-factor authentication whenever possible. And lastly, keep an eye on your accounts for any suspicious activities and report them immediately.

4. Rearrange the words to make the correct sentences

1.Of / you're / to / it / are / up / and / forms / a / so / social / engineering / let's / many / combat / There / what / look / how / at / against / have

2.If / social / You're / more / term / to / that / familiar / probably / with / engineering / even / suspect / you're / you / the / new

3.They / is / to / while / everything / to / even / make / your / into / working / can / bank / you / sure / connected / ask / log

4.Quickly / you / want / as / urgency / of / scammers / Many / a / matter / react / to

5.On / Take / out / any / tactics / and / what's / don't / moment / figure / for / high / pressure / fall / a / going

6.An / hour / Ask / a / for / friend / to / half / call/

III. GRAMMAR IN CONTEXT

1. Choose the correct form of the verb (Past Perfect or Past Simple) to complete the sentences:

1) Yesterday, I _______ (had finished/finished) debugging the code before I left the office.

45

2)By the time they called me, I ______ already (had fixed/fixed) the

issue.

3)The server _______ (had crashed/crashed) right after we installed the new software.

4)She _______ (had not found/didn't find) the solution until she contacted the support team.

5)After the update, the system ______ (had run/ran) much smoother

than before.

6)They _______ (had not worked/didn't work) on the project for a week when they realized they were using the wrong framework.

7)After he _______ (had received/received) the email, he immediately started working on the task.

8)The backup process _______ (had been/was) already completed be-

fore the power outage occurred.

2. Translate the sentences paying attention to the sentences in the Past Perfect.

1.Когда я пришел на работу, команда уже закончила разработку нового продукта.

2.Мы не могли запустить тестирование, потому что клиент еще не предоставил нам доступ к их системе.

3.Пользователь сообщил о проблеме, которую мы уже исправили в

прошлом обновлении программного обеспечения.

4.Проект был успешно завершен к моменту, когда новый руководитель пришел в нашу команду.

5.Компания была вынуждена закрыться, потому что они потеряли важного клиента.

IV. ADDITIONAL READING

1.Write a summary of the text given below.

2.Turn the highlighted sentences into the Past Perfect Tense.

Modern Day Security

It's tempting to think we've made up the words Phishing, Vishing and Smishing but in actual fact they're all forms of social engineering scams. Whilst we've covered social engineering already, it's worth looking at these three modern day threats individually.

Social engineering, the act of getting information from a person based on their human instinct to react, help or be entrapped into some form of false promise, isn't as modern as the name suggests. Although the term 'social engineering' is in fact relatively new, the process of obtaining sensitive information from a victim has been around for a very long time.

46

The digital age, of course, has increased the attacks and how they're delivered. No longer is a victim beguiled by post, now they're bombarded by false websites, emails and a string of other cleverly disguised mediums.

Let's break down the three main modem methods of how a scammer will attempt to obtain your personal and sensitive information: Phishing, Vishing and Smishing

Phishing is the attempt to obtain information from a potential victim through emails, messaging, social media and auction sites. They can come in the form of an email, for example, claiming to have some money available for you or pretending to be from your bank or credit card company. Social

media phishing includes individuals befriending you, or pretending to be someone you may know, then asking for information. Similarly a phishing attack can come in the form of a Facebook seemingly friendly test, such as 'name the top five things about yourself and tag ten friends... The unwitting victim will happily reveal their date of birth, where they were born, pets names, names of any children and so on. The attackers will gather all that information and use it to their advantage.

Interestingly there are also three different phishing types: Spear, Clone and Whaling. Spear phishing is designed to specifically target an individual, gathering information such as the above Facebook 'game' whereby the scammer can personalise their attack on the victim.

Clone phishing is an attack type that uses a previously delivered, legitimate email containing an attachment but with the details changed and the attachment swapped for a virus or keylogger. To the victim the email looks real, since it's cloned from a real email, and when the attachments opened it infects the computer.

Whaling is when a phishing attack targets senior executives of a company or a high profile individual or business. The attack is a finely crafted email or web address that's created to look business-like and containing information specific to the company or individual.

V. WRITING

Choose one of these themes and write an essay.

1.Many people believe that only the elderly or less tech-savvy individuals fall for social engineering scams. Is this a fair assumption?

2.Some argue that companies should take more responsibility for pro-

tecting their customers from social engineering scams. To what extent do you agree or disagree with this statement?

3. As technology continues to advance, so do the tactics used by social engineering scammers. How can individuals and businesses stay one step ahead of these threats?

47

UNIT 7

The Basics of Email Communication

Email, instant messaging, and cell phones give us fabulous communication ability, but because we live and work in our own little worlds, that communication is totally disorganized.

Marilyn vos Savant

Before you read

1.Read the quote above and say whether you agree or not with it. Prove your answer.

2.Discuss the questions below.

1.Do you use the internet every day? What do you usually do on the internet?

2.Have you ever sent an email to someone in another country?

3.Do you think the internet has made communication easier or more difficult?

4.Have you ever had a negative experience online? 5.How important is the internet for your daily life?

6.Do you prefer communicating through email or social media? 7.Can you imagine living without the internet? Why or why not?

Vocabulary

email ['iːmeɪl] – электронная почта, электронное письмо inbox ['ɪnˌbɔks] – почтовый ящик

spam [spæm] – спам

attachment [ə'tæʧmənt] – приложение к электронному письму download ['daunləud] – скачать

upload ['ʌpləud] – выгружать в сеть inbox ['ɪnˌbɔks] – почтовый ящик

searchengine [sɜːʧ 'enʤɪn] – поисковая система online shopping – покупки в Интернете

social media post – публикация в социальных сетях to bookmark a website – добавить сайт в закладки hitthelike button – нажать кнопку "Нравится"

Readthetextthoroughlyandchoosetheappropriatetitleto thistext.

***

The internet has become an essential part of our lives, and it's hard to imagine a world without it. It has revolutionized the way we communicate,

48

work, and access information. One of the most popular ways of communicating online is through email.

Email is an electronic message that can be sent from one computer to another using the internet. It's a quick and convenient way of communicating with friends, family, and colleagues. You can send an email at any time of the day, and the recipient will receive it instantly. Unlike traditional mail, there is no need for stamps or envelopes, and it's completely free.

To send an email, you need an email address and an internet connection. You can create an email account for free on various websites such as Gmail, Yahoo, or Outlook. Once you have created an account, you can start sending and receiving emails.

Emails are composed of three parts: the header, body, and footer. The header contains the recipient's email address, subject line, and sender's email address. The body is where you write your message, and the footer contains your signature and any other relevant information.

One of the advantages of email is that you can attach files such as documents, images, or videos. This makes it easy to share information with others. However, it's important to be careful when opening attachments from unknown sources as they may contain viruses or malware.

In conclusion, the internet and email have changed the way we communicate and access information. Email is a fast and convenient way of staying in touch with others, and it's easy to use once you understand thebasics.

Choose the appropriate title to the text:

–The Basics of Email Communication

–How to Send a Letter via Email

–The Negative Impact of the Internet on Society

I. ELICITING THE VOCABULARY

1. Match the words with their definitions

49

2. Fill in the missing words from the box.

Search engine, to open an attachment, online shopping, attachment, inbox, download, upload, spam, to check your inbox

1.I need to check my _____(1) for an important message from my boss.

2.There are too many new messages in my _____(2) and I don't know which one to read first.

3.Some _____(3) emails may contain viruses or scams, so be careful and don't click on them.

4.The _____(4) in the _____(5) was a photo of my friend's new baby.

5.I am going to _____(6) a new game to play on my phone.

6.I want to _____(7) some pictures from my vacation to Instagram.

7.Every day, I send an _____(8) to my best friend who lives in another country.

8.Before you log out of your _____(10) account, don't forget _____(11) for new messages.

9.It is not safe _____(12) from an unknown sender or _____(13) files from untrusted websites.

10.When you want to find information on the internet, you can use a

_____(14) like Google or Bing.

11.My motherlikes_____(15),shebuysalmosteverythingfromAmazon.

II. COMPREHENSION

1.Read the text again and choose the right variant

1.What has become an essential part of our lives?

a)Traditional mail

b)The internet

c)Stamps

d)Envelopes

2.What is email?

a)A type of traditional mail

b)An electronic message sent using the internet

c)A type of social media platform

d)A type of instant messaging app

3.What is one advantage of email over traditional mail?

a)It's more expensive

b)It's slower

c)It requires stamps and envelopes

d)It's completely free

50