Cyber security threats are a constant concern for businesses of all sizes. Data breaches, malware attacks, and phishing scams can disrupt operations, damage reputations, and result in significant financial losses. Effective defensive cyber security strategies involve the use of technology, processes, and protocols to protect an organisation’s computer networks, devices, and sensitive data from malicious attacks.

In our previous quarterly newsletter, we highlighted how defensive cyber security is not just about technology, tools and systems. The human element is equally, if not more, important. Understanding the psychological and emotional triggers hackers use to gain unauthorised access to information is crucial in preventing attacks before they even happen.

In this edition, we expand further on the topic of “Social Manipulation” (also referred to as “Social Engineering”) to help you identify suspicious emails or other communication.

Key characteristics:

• Exploits human behaviour rather than technical vulnerabilities.
• Often involves deception, persuasion or impersonation.
• Targets trust, fear, urgency, or curiosity to manipulate victims.

Types of social engineering to look out for:

• Phishing: Sending fraudulent emails or messages that appear legitimate to steal credentials or install malware.
• Pretexting: Creating a fabricated scenario to obtain information (e.g., pretending to be IT support or an ASL employee).
• Baiting: Offering something enticing (such as free software or USB drives) to lure victims into a trap.
• Tailgating: Physically following someone into a secure area without proper authorisation.
• Spear phishing: A targeted phishing attack aimed at a specific individual or organisation.

We are increasingly seeing a trend whereby AI is utilised to exploit a victim’s trust. Natural Language Generation (NLG) tools, such as large language models, can craft highly personalised and grammatically correct phishing emails, texts, or social media messages. These messages can mimic the tone and style of real individuals (e.g., a CEO or colleague), significantly increasing the likelihood of success. For Afrikaans speaking ASL clients, this means that cyber criminals can communicate with you in fluent Afrikaans using AI to make communication appear more trustworthy and legitimate.

How to spot characteristics of a suspicious email:

• Urgent or threatening language: “Act now or face penalties!” – legitimate agencies don’t threaten via email.
• Spoofed email addresses such as accountz@asl.co.za or asl@vodamail.co.za asking for sensitive details. Note the errors in the domain name before or after the “@ “sign.
• Unexpected attachments or links: Don’t open or click anything you weren’t expecting – especially if it’s labelled “invoice” or “statement.”
• Requests for sensitive information: Legitimate entities will never request banking details, account credentials, or tax numbers via email or telephone.
• Impersonation of known contacts: Watch out for slightly altered names or email addresses pretending to be your accountant, bank, or even a colleague.

How does AI play a role?

• Emails without spelling or grammatical mistakes, tailored to the victim’s language.
• Text messages or automated chats that mimic the writing style of a real person.
• Manipulated audio or video (deepfakes) that imitate the voice or appearance of someone trusted.

How to identify a suspicious email?

• Always review where the link takes you by hovering over the link before clicking on it.
• Always verify the source of the email before replying or clicking on links.

In our next edition, we will cover additional cyber security topics in greater detail to help ASL clients stay informed and alert.

About Cyberlogic

Cyberlogic, ASL’s preferred managed IT and cyber security partner, has nearly 30 years of experience helping businesses build secure, scalable IT environments. With a team of over 150 professionals across South Africa, Mauritius, and the UK, we specialise in IT leadership, cyber security, data and analytics, and cloud solutions. As part of the Hyperclear Tech group, we deliver innovative technology solutions while giving back through our non-profit initiative, Ride for a Child, which supports education for underprivileged children.

For more information, contact francoisk@cyberlogic.co.za.