Phishing and social engineering in Cybersecurity - Time & Space Complexity

Time Complexity: Phishing and social engineering

O(n)

Understanding Time Complexity

We want to understand how the effort to carry out phishing and social engineering attacks grows as the number of targets increases.

How does the time and work needed change when attackers try to reach more people?

Scenario Under Consideration

Analyze the time complexity of the following attack process.

for each target in target_list:
    gather personal info about target
    craft a fake message tailored to target
    send the fake message
    wait for response
    if response is positive:
        attempt to extract sensitive data
    else:
        move to next target

This code simulates how an attacker tries phishing on multiple people, customizing messages and handling replies.

Identify Repeating Operations

Look at what repeats as the attacker tries to reach many targets.

• Primary operation: Looping through each target to send a phishing message.
• How many times: Once for every person in the target list.

How Execution Grows With Input

As the number of targets grows, the total work grows too.

Input Size (n)	Approx. Operations
10	About 10 message attempts
100	About 100 message attempts
1000	About 1000 message attempts

Pattern observation: The work grows directly with the number of targets; doubling targets doubles the effort.

Final Time Complexity

Time Complexity: O(n)

This means the time needed grows in a straight line with the number of people targeted.

Common Mistake

[X] Wrong: "Phishing attacks take the same time no matter how many people are targeted."

[OK] Correct: Each new target requires separate effort to gather info, craft messages, and wait for replies, so more targets mean more time.

Interview Connect

Understanding how attack effort grows helps you think like a defender or attacker, a useful skill in cybersecurity roles.

Self-Check

"What if the attacker automated message crafting and sending? How would that change the time complexity?"

Practice

1. What is the main goal of a phishing attack?

easy

A. To trick people into giving personal information

B. To physically steal a computer

C. To improve internet speed

D. To update software automatically

Solution

1. Step 1: Understand phishing purpose

   Phishing attacks use fake messages to deceive people.

2. Step 2: Identify the attack goal

   The goal is to steal personal or sensitive information by tricking users.

3. Final Answer:

   To trick people into giving personal information -> Option A

4. Quick Check:

   Phishing = stealing info by tricking [OK]

Hint: Phishing steals info by fake messages [OK]

Common Mistakes:

• Confusing phishing with physical theft
• Thinking phishing improves technology
• Believing phishing updates software

2. Which of the following is a common sign of a phishing email?

easy

A. An email asking for your password urgently

B. An email from a known contact with no links

C. A newsletter you subscribed to

D. A system update notification from your computer

Solution

1. Step 1: Identify phishing email traits

   Phishing emails often create urgency and ask for sensitive info like passwords.

2. Step 2: Match the option to phishing signs

   An email asking for your password urgently shows urgency and password request, a common phishing tactic.

3. Final Answer:

   An email asking for your password urgently -> Option A

4. Quick Check:

   Urgent password request = phishing sign [OK]

Hint: Urgent password requests often mean phishing [OK]

Common Mistakes:

• Thinking all emails from contacts are safe
• Confusing newsletters with phishing
• Assuming system updates ask for passwords

3. Consider this message: "Your account will be locked in 24 hours. Click here to verify." What is the most likely purpose of this message?

medium

A. To warn about a real account issue

B. To update account settings securely

C. To steal login details through a fake link

D. To provide customer support contact

Solution

1. Step 1: Analyze message content

   The message creates urgency and includes a suspicious link.

2. Step 2: Identify phishing behavior

   Fake links are used to steal login details by tricking users.

3. Final Answer:

   To steal login details through a fake link -> Option C

4. Quick Check:

   Urgency + fake link = phishing attempt [OK]

Hint: Urgent messages with links often steal info [OK]

Common Mistakes:

• Believing all urgent messages are real
• Clicking links without checking URL
• Assuming links always lead to safe sites

4. You receive an email that looks like it's from your bank but the sender's address is [e-mail]. What is the best action to take?

medium

A. Reply asking for more details

B. Verify the sender's address and contact the bank directly

C. Click the link to check your account immediately

D. Forward the email to friends to warn them

Solution

1. Step 1: Check sender's email carefully

   The sender's address looks suspicious and not official.

2. Step 2: Choose safe verification method

   Contacting the bank directly using official channels avoids phishing risks.

3. Final Answer:

   Verify the sender's address and contact the bank directly -> Option B

4. Quick Check:

   Verify sender + direct contact = safe action [OK]

Hint: Always verify sender and contact official source [OK]

Common Mistakes:

• Clicking suspicious links immediately
• Replying to unknown senders
• Sharing suspicious emails without checking

5. A social engineer tries to gain access to a company by pretending to be a trusted delivery person. Which of the following is the best way to prevent this type of attack?

hard

A. Share passwords with delivery staff for convenience

B. Allow anyone with a delivery badge inside

C. Ignore all visitors to avoid risk

D. Verify identity and delivery details before granting access

Solution

1. Step 1: Understand social engineering tactics

   Attackers use trust and fake identities to gain access.

2. Step 2: Identify proper security response

   Verifying identity and delivery details prevents unauthorized entry.

3. Final Answer:

   Verify identity and delivery details before granting access -> Option D

4. Quick Check:

   Verify identity = prevent social engineering [OK]

Hint: Always verify before trusting visitors inside [OK]

Common Mistakes:

• Trusting anyone with a badge
• Ignoring visitors completely
• Sharing sensitive info with outsiders