{"id":28443,"date":"2026-09-08T21:56:08","date_gmt":"2026-09-08T18:56:08","guid":{"rendered":"https:\/\/alienroad.com\/yandex-bilgi-bankasi\/social-engineering-and-deception\/"},"modified":"2026-09-09T00:47:43","modified_gmt":"2026-09-08T21:47:43","slug":"social-engineering-and-deception","status":"publish","type":"ar_ykb","link":"https:\/\/alienroad.com\/yandex-bilgi-bankasi\/social-engineering-and-deception\/","title":{"rendered":"Social engineering and deception"},"content":{"rendered":"<p>Social engineering is deception aimed at extracting money or sensitive data \u2014 card details, credentials, phone numbers \u2014 from ordinary users. It is the most serious category in this list, because Yandex may show a warning about the site directly in search results.<\/p>\n<h2>The three tactics Yandex describes<\/h2>\n<ul>\n<li><strong>Getting the click.<\/strong> Clickbait headlines and misleading content: fake news sites, imitation dating services or lotteries, offers of free or absurdly cheap goods, prizes, and easy-money platforms.<\/li>\n<li><strong>Manufacturing trust.<\/strong> Impersonating an official site through similar domains, interface elements and content; publishing fake positive reviews or false information.<\/li>\n<li><strong>Harvesting data.<\/strong> Fake checkout pages asking for card details; fake login and account-recovery forms; forms that promise access to content in exchange for a phone number or card and never deliver \u2014 including forms that quietly activate a paid auto-renewing subscription whose terms the user never sees.<\/li>\n<\/ul>\n<h2>The assumption Yandex makes about you<\/h2>\n<p>The remediation guidance is notable for what it assumes: if your site is suspected of social engineering, it may have been <strong>compromised by attackers<\/strong>. The first instruction is to check for malicious code, not to review your marketing. Phishing pages are routinely hosted on hacked legitimate sites \u2014 in a forgotten subdirectory, on an unused subdomain, inside an uploads folder \u2014 without the owner ever seeing them.<\/p>\n<h2>Where to look on a site you believe is clean<\/h2>\n<ul>\n<li>Files added or modified recently in web-writable directories, especially uploads.<\/li>\n<li>Subdomains and directories nobody maintains: old campaigns, staging copies, a decommissioned CMS.<\/li>\n<li>Pages in the console&#8217;s index reports that you do not recognise \u2014 Yandex crawled them, which means they exist.<\/li>\n<li>Admin accounts you did not create, and plugins nobody remembers installing.<\/li>\n<\/ul>\n<h2>The legitimate-site version of this violation<\/h2>\n<p>Two patterns can be entirely unintentional: a subscription whose renewal terms are disclosed somewhere other than the point of payment, and a lead form promising something the user does not actually receive. Both match the description of collecting data under false pretences regardless of what was intended. Stating the terms next to the button rather than in a linked document costs nothing and removes the ambiguity.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Social engineering is deception aimed at extracting money or sensitive data \u2014 card details, credentials, phone numbers \u2014 from ordinary users. It is the most serious category in this list, because Yandex may show a warning about the site directly in search results. The three tactics Yandex describes Getting the click. Clickbait headlines and misleading [&hellip;]<\/p>\n","protected":false},"menu_order":19,"template":"","meta":{"footnotes":""},"ar_ykb_kategori":[755],"ar_ykb_etiket":[],"class_list":["post-28443","ar_ykb","type-ar_ykb","status-publish","has-post-thumbnail","hentry","ar_ykb_kategori-site-security-and-violations"],"_links":{"self":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb\/28443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb"}],"about":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/types\/ar_ykb"}],"version-history":[{"count":2,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb\/28443\/revisions"}],"predecessor-version":[{"id":29034,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb\/28443\/revisions\/29034"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/media\/28825"}],"wp:attachment":[{"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/media?parent=28443"}],"wp:term":[{"taxonomy":"ar_ykb_kategori","embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb_kategori?post=28443"},{"taxonomy":"ar_ykb_etiket","embeddable":true,"href":"https:\/\/alienroad.com\/wp-json\/wp\/v2\/ar_ykb_etiket?post=28443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}