Segurança cibernética em redes sociais: simulação de ataque de engenharia social com chatbots e estratégias de contramedidas

Abstract

This work aims to understand how chatbots can be used as a tool for social engineering by conducting a case study involving phishing and pretexting attacks in a simulated environment. The study explicates the concept of social engineering, highlighting the main techniques used by attackers. It then analyzes the potential use of chatbots as a social engineering tool on messaging platforms, focusing on WhatsApp. Next, the construction of the simulation environment is presented with the tools integrated to achieve the desired outcome, which is the generation of messages through Artificial Intelligence and automated message exchanges. Finally, some strategies to mitigate the simulated attack are discussed.