Social networks as an attack vector for targeted attacks

Abstract

This research paper thoroughly examines the issue of phishing on social media platforms and the various vulnerabilities inherent in these systems. Phishing is a widely used social engineering technique employed by attackers to deceive users into revealing sensitive information, such as login credentials or financial data. The work provides a detailed analysis of the different types of phishing attacks, including traditional email phishing, spear phishing, whaling, and the more targeted approach of social media phishing. Particular attention is given to the mechanisms of phishing within social networks, such as advanced social engineering tactics, the dissemination of fraudulent links, deceptive messages, and the practice of account cloning. Additionally, the study delves into the critical vulnerabilities of social media platforms, including insufficient account security measures, the proliferation of fake profiles, the general lack of user awareness, and underlying technical vulnerabilities within the platforms themselves. Lastly, the paper suggests comprehensive methods to protect against phishing, including improving user education and awareness, adopting two-factor authentication, regularly updating passwords, reporting suspicious activities, and implementing stronger technical safeguards. The study underscores the importance of collaborative efforts between users and social network providers to effectively combat phishing and promote greater internet security.