Social engineering

Understand how susceptible your employees are to falling foul of social engineering attacks.

Gain visibility of the information that an attacker could gather about your business from intelligence freely available in the public domain.

Challenge your organisation’s cyber security controls, such as firewall rules, to ensure they are effective at identifying and blocking social engineering attacks.

Improve employee cyber security awareness by using a simulated social engineering attack to highlight good and bad practices.

Phishing-as-a-service

Phishing is one of the most common attack vectors used by cybercriminals. By creating emails that imitate those of trusted individuals and organizations, fraudsters seek to lure users into clicking links or attachments that install keystroke logging malware, or divulge personal information such as passwords.

AXO phishing simulation service assesses your employees awareness of phishing email scams.

Spear-phishing-as-a-service

Spear phishing is a highly targeted phishing attack designed to compromise a specific individual, usually a system administrator or high authority individual. AXO spear phishing service tests the susceptibility of an agreed target to reveal confidential information.

Business email compromise

A Business Email Compromise (BEC) is a type of phishing attack involving the impersonation of a senior executive. Its aim is to trick an employee, customer or vendor into wiring payment for goods or services to an alternate bank account.

AXO social engineering service can be used to simulate a Business Email Compromise attack, and test awareness of other fraudulent practices such as mandate fraud and distribution fraud.

Social engineering penetration testing

Social engineering is an attack vector commonly used by AXO certified ethical hackers as part of a wider cyber security assessment. Learn more about our complimentary range of cyber security testing services

Reconnaissance

By using open-source intelligence gathering techniques (OSINT), our team of ethical hackers seek to identify valuable company and employee information that could be used to improve the success of the intended simulated social engineering assessment.

Mobilization

Using all aggregated intelligence and their knowledge of the latest TTPs, our experts carefully prepare your phishing test to ensure that it is as authentic as possible and stands the best chance of achieving a pre-agreed objective.

Execution

We execute the phishing test and, if part of the scope of the assessment, spoof any compromised users in order to escalate network privileges and make fraudulent requests, such as those common in distribution fraud and BEC attacks.

Reporting and debrief

Upon completion of the social engineering operation, we document its results and provide recommendations to help address any identified risks and improve security awareness training programmes.

Black-box testing

Under a black box social engineering simulation, AXO’s ethical hackers have no prior knowledge of your organisation’s environment. Reconnaissance is conducted to identify intelligence about employees and security controls in place.

White-box testing

A white box approach is used in instances where phishing testing targets specific employees using pre-supplied email addresses.