Hackers Use Social Media Profiling to Execute Targeted Cyberattacks
Cybercriminals leverage AI and social engineering to bypass security protocols by manipulating human trust.
1Targeted Social Engineering Tactics
Cybercriminals are increasingly studying victim profiles on social media to craft highly personalized attacks. By gathering data on professional roles, interests, and relationships, attackers create credible scenarios. This method, known as social engineering, aims to manipulate human trust rather than relying solely on technical exploits to breach secure digital systems.
2The Human Element as Vulnerability
Despite advanced security measures in banking and corporate sectors, humans remain the weakest link in cybersecurity. Attackers often pressure victims to act urgently, bypassing verification steps. Dr. Bushra Al Balushi emphasizes that even when systems are robust, manipulating a user into clicking a malicious link can grant unauthorized access to data.
3AI-Powered Deception and Malware
Artificial intelligence has significantly lowered the barrier to entry for cyberattacks. Majd Sinan notes that individuals with limited technical skills can now use AI to generate malicious code and sophisticated phishing content. These tools create convincing images, videos, and audio, making it difficult for average users to distinguish between legitimate and fraudulent communications.
4Verification and Caution Strategies
Experts advise users to pause and verify the identity of any sender before responding to urgent requests. Even official-looking emails can be deceptive. A personal experience shared by Dr. Al Balushi highlights that verifying through trusted, independent channels is essential, as even genuine communications may sometimes appear suspicious to the recipient.
5The Sarab Verification Program
To combat the rise of deepfakes and synthetic content, the Dubai Electronic Security Center is developing the 'Sarab' program. This tool aims to verify the authenticity of visual content with a reported 91% accuracy rate. Scheduled for release by the end of the year, it will be available as an open-source resource.
6Incident Reporting and Coordination
Dubai has established a comprehensive framework for handling cybercrimes through coordination between the Dubai Electronic Security Center and Dubai Police. The 'eCrime' platform streamlines the reporting process. Jurisdiction depends on the nature of the incident; corporate-related breaches are handled by the center, while individual cases are managed by the police.
7Automated Threat Landscape Growth
The scale of modern cyber threats is massive, with Kaspersky systems detecting approximately 500,000 new malware samples daily. This rapid evolution forces security firms to constantly upgrade their defensive capabilities. The integration of AI into criminal toolkits has transformed cyberattacks into highly automated operations, increasing both the frequency and sophistication of threats.
8Legal Consequences in UAE
The UAE treats cyber fraud as a serious criminal offense under Federal Decree-Law No. 34 of 2021. Penalties include imprisonment for at least one year and fines ranging from 250,000 to one million dirhams. The law specifically targets unauthorized access to funds or information, emphasizing that the act of deception itself constitutes a crime.