Anyone know any good introductions to the concept of social engineering that I can give to helpdesk workers to help them spot suspicious activity? I'm looking for a few examples and a few tips on how to avoid being caught out.
Here are some listed examples: http://www.symantec.com/connect/articles/social-engineering-fundamentals-part-i-hacker-tactics ... but I think your primary defense is basic education and common sense. Test for a rudimentary ability to detect soceng during the hiring process.
Kevin Mitnick - "The Art Of Deception". Fantastic read.
Yeah, tell them not to give out information to people they don't know and can't verify the identity of.