How a Russian hacker (I presume) tried to trick me using Social Engineering

A couple days ago, I became the target of a Russian hacker (I am presuming) who tried to manipulate me using social engineering.

What is social engineering?

In the world of Information Technology and Security, is the technique of manipulating people to divulge confidential information that can be used to either commit fraud or gain access to a system. 

It, IMO, is probably the easiest form of hacking. 

Fortunately, I saw the red flags before it went any further. This is how it started.  

A random WhatsApp message

So it started with a simple ‘hello’ on the messaging app WhatsApp. The person messaged and I responded. This was my first mistake. He or she was phishing and I had just taken the first bite. 

Anyway, this person messages back and says her name is ‘Sara’ and she is from Russia. Her location was obvious due to the country code from her phone number (or is it?). 

BTW, her number is +7 958 630-01-43 if anyone is interested. 

She then sends me supposed photographs of herself and I assume she is a student. When I ask her, she plays along and says she is a medical student. The it gets weird. 

It gets weird

She then asks if she can add me to her WhatsApp group and I agree.  Being familiar with the messaging platform, I assumed she would add my number and I would be in the group. However, it turns out differently. 

She then sends me a message in a sexy sultry voice asking for a 5 digit code. The same message is conveyed through another message. Of course, a few seconds later I get a text message with a 5 digit code for Telegram; another messaging app.  This triggers a red flag.

By now I am pretty certain that this individual is trying to probably create a fake account under my name on Telegram so I ask he how she got my number. 

Her response – Friend Finder – which although as flattering it might have sounded was the alarm bells that indicated danger. 

Anyway, I think he or she may have realized that I am on to them so they have not contacted me since. 

The lesson learned

The incident has not only prompted me to reassess my online security but to also be vigilant and not fall for the beautiful girl routine.  

It also made me realize how easy it is for people using social engineering to gather information – and how bad many people are at protecting information that although might seem trivial, could be the key to someone hacking your system.