Preventing Social Engineering Attacks on IT Help Desks: Lessons from MoneyGram’s Breach
Finn Jensen | Founder, FastPasscorp
Social Engineering: The Invisible Threat to IT Help Desks
In a recent high-profile data breach, MoneyGram fell victim to a social engineering attack targeting its IT help desk, compromising its systems and customer data, and halting operations for five days. This incident has led to the UK Post Office terminating its contract with MoneyGram, dealing a financial and reputational blow to both organizations.
While MoneyGram may be the latest headline, it’s far from alone. Social engineering attacks on IT help desks have hit some of the world’s largest brands, including MGM Hotels, which suffered a loss of over $100 million due to compromised help desk operations. Even high-security institutions, such as the CIA and FBI, were not immune, with senior officials’ emails breached through social engineering. Similarly, Twitter’s famous attack in 2020 revealed how even privileged accounts can be accessed through manipulated help desk staff.
With an ever-increasing number of data breaches linked to social engineering, it’s crucial to address why help desks are such an easy target — and what can be done to prevent these costly, often embarrassing, breaches.
Why Are Help Desks Vulnerable to Social Engineering?
Social engineering relies on the manipulation of human psychology rather than on technical vulnerabilities. Attackers craft convincing stories, build rapport, and exploit the help desk’s main function: to assist callers. A well-trained social engineer knows how to exploit human nature, catching even the best help desk agents off guard.
For many organizations, the primary defense against social engineering relies on trusting help desk employees to use common sense and recognize potential red flags. However, expecting help desk agents — often new hires or staff under heavy workloads — to outmaneuver sophisticated social engineers is a flawed approach. With social engineers armed with carefully crafted scripts, persuasion techniques, and knowledge of organizational processes, human judgment alone isn’t enough.
The Costs of Ignoring Social Engineering
The MoneyGram breach is a recent, stark reminder of what’s at stake. The attack led to a five-day service disruption, resulting in severe operational downtime, loss of customer trust, and contract termination with the UK Post Office. And this is only one example:
- MGM Hotels faced direct financial losses of over $100 million, primarily from help desk manipulation.
- CIA and FBI directors had emails exposed in a social engineering attack orchestrated by a teenager.
- Twitter’s help desk was breached, leading to the compromise of high-profile user accounts, demonstrating that even tech giants are vulnerable.
Closing the Gaps: How to Secure Your Help Desk from Social Engineering
- Implement a Compulsory User Verification Process
The first step to combating social engineering attacks is enforcing a standardized verification process for every help desk interaction. This goes beyond “common sense” or “gut feeling” and mandates clear, controlled steps that agents must follow. By establishing a verification protocol, organizations can protect their help desks from unauthorized access attempts.
- Automate the Verification Workflow
The most effective way to ensure compliance with verification processes is through an automated workflow that integrates directly into the organization’s ITSM system. Manual steps are prone to human error, which social engineers capitalize on. By automating the process, help desks can ensure every caller is verified without exception, reducing both human error and opportunities for manipulation.
Automated Verification Workflow Benefits:
- Ensures each verification step is followed, regardless of agent experience or workload.
- Reduces the risk of human error, which social engineers exploit.
- Provides audit logs for compliance tracking and security reviews.
- Limit Privileged Access
One of the most important measures in protecting the help desk is to restrict privileged access from support agents. Rather than allowing agents to reset passwords or grant sensitive access directly, organizations should integrate a secure, automated system that handles these requests without revealing critical information to the agent. This prevents agents from accidentally (or under duress) providing credentials or access that could compromise the organization.
FastPass Identity Verification Manager: A Secure Solution for Help Desks
The FastPass Identity Verification Manager (IVM) offers a robust, streamlined solution to help desks vulnerable to social engineering attacks. Integrated directly with popular ITSM platforms, like ServiceNow, FastPass IVM provides a reliable, automated verification workflow that ensures compliance and blocks social engineering attempts.
How FastPass IVM Secures Your Help Desk:
- Automated Multi-Factor Verification: Provides multiple verification methods like MS and Google Authenticators, OKTA, RSA, DUO, SMS, email tokens, and questions to system data and personal information to secure every interaction.
- Individualized for different user groups: Customers configure specific processes to match the security requirements of the different user groups.
- Direct ITSM Integration: Seamlessly integrates with existing systems, making it easy to implement and use for help desk supporters.
- Detailed Audit Trails: Logs every verification step, ensuring compliance and providing a clear audit trail – it is never forgotten!!
By taking privileged access out of the hands of support staff and enforcing automated verification, FastPass IVM effectively “closes the backdoor” that social engineers often exploit.
Conclusion
As high-profile breaches have shown, social engineering attacks on IT help desks are an escalating threat with costly consequences. Relying solely on staff training and common sense is no longer viable. Implementing a structured, automated verification process is the only reliable way to protect your help desk from becoming a gateway for cybercriminals.
Secure your organization’s first line of defense with FastPass IVM and take proactive steps to prevent social engineering attacks. Learn more about protecting your help desk with automated verification workflows by visiting FastPass IVM Product Page.
