Quid pro quo
Quid pro quo translates to “something for something.” So in the context of social engineering, a quid pro quo attack is when a social engineer offers a service, usually “tech support,” in exchange for access to secure information.
How it works:
- A social engineer pretends to be IT support, calling around a company
- They keep calling until they find someone with an actual problem
- Once they find a victim, they give them malicious instructions
- When executed, these instructions compromise the victim’s computer
- A social engineer can then install malware, collect information, or infiltrate a network