Hackers increasingly are leveraging social engineering to gain credentials that allow them to compromise organizations’ systems, but there are red flags that could alert system users to potential fraudulent activity, said Roger Grimes, data-driven defense evangelist at security firm KnowBe4 LLC. Teaching people to recognize these red flags could help prevent attacks, he said at a recent webinar.^[1]

Here is a list of Grimes’ top social engineering red flags involving email: