Social Engineering

Today’s class was honestly one of the best classes we’ve had because we got to experience social engineering from a different perspective. Instead of just learning about scams and phishing, we actually had to create one ourselves. My group decided to make a fake Chainsmokers concert RSVP using a QR code and Google Form. We tried to make it look as believable as possible by using the TCU and Crew logos and making it seem like something that could realistically be advertised around campus. We also added a limited-time meet-and-greet opportunity to create a sense of urgency and encourage people to respond quickly. What made the activity even more interesting was finding out that someone in each group had been given the secret job of trying to collect personal information from their group members. Grace was assigned to do this in our group, and I ended up being one of the people she successfully tricked. She asked for my phone number so she could send me the post we had created, and I gave it to her without questioning it. Since we were already working together and discussing the assignment, her request seemed completely normal to me. Looking back, it was funny to realize how easily I fell for it, especially because I knew we were learning about social engineering at the time. I was so focused on the assignment and the conversation that I didn’t stop to consider whether I actually needed to give her my number. It showed me that scams don’t always look suspicious or come from strangers. Sometimes, a simple and believable request from someone you already trust can be enough to get you to share information. This activity definitely made the concept of social engineering feel more realistic to me. It showed me how distractions can all make people less likely to stop and question what they are being asked to do. I think the biggest thing I took away from the activity is to slow down and think before sharing personal information, even when the situation seems harmless.