The basic steps criminal use to attack an organization's information system are: conduct reconnaissance, become friends with the target, research, execute the attack, and cover tracks. conduct reconnaissance, attempt social engineering, scan and map the target, research, execute the attack, and cover tracks attempt social engineering, scan and map the target, O research, execute the attack, and cover tracks. conduct reconnaissance, attempt social engineering, scan and map the target, execute the attack, and cover tracks. 1 of 4