dc_404

social engineeringthe dark art

dc_404

social engineering definedbeyond the dictionary

dc_404

social engineering definedbeyond the dictionary

social engineering is… an attack on the trust relationships and processes of an organization designed to grant unauthorized privilege or

access to the attacker.

dc_404

social engineering definedbeyond the dictionary

social engineering is… an attack on the human firewall.

dc_404

social engineering definedbeyond the dictionary

social engineers use… small pieces of information,

repeated attacks,multiple techniques,technology for assistance andgood social skillsto break in.

dc_404

methodologylather, rinse, repeat

dev

executeanalysis

recon

dc_404

methodologylather, rinse, repeat

dev

executeanalysis

recon

dc_404

dc_404

dc_404

dc_404

reconnaissance

dial for dollarsinteractive recon

reach out and fist someone

dc_404

reconnaissanceexecutive vainglory

dc_404

reconnaissance

tom is your fiend

site:linkedin.com -dir inurl:pub “company"

site:facebook.com “company"site:facebook.com “person"

site:monstercom “company"

weakest link in the chain

monster bait

dc_404

reconnaissanceI am from the government and I’m here to help

http://www.fec.gov/finance/disclosure/advindsea.shtml

dc_404

reconnaissancewith vendors like these…

dc_404

reconnaissancemy other google is maltego

dc_404

the art of disguiseincognito is not a ludacris album

dc_404

janitorsmaintenance peopledelivery personnel

contractor

the invisible manthe art of disguise

dc_404

the art of disguiseall for one and one for fail

it guycorporate lackey

“new guy”

dc_404

the art of disguiseprops and toys that don’t ship in a brown wrapper

computer gearid badge

work orderclipboard

portable media

dc_404

the art of disguise

pretext callingspear phishingsocial networks

on the internet nobody knows you’re a god

dc_404

the art of disguise

emailcaller id

rfid

sufficiently advanced technology is indistinguishable from magic

dc_404

appeal to authority

appeal to authority

getting what you wantsycophants make great minions

dc_404

appeal to authorityplea for help

plea for help

getting what you wantcute puppy-dog eyes

dc_404

appeal to authorityplea for helpoffer of help

offer of help

getting what you wantwhite knight security

dc_404

appeal to authorityplea for helpoffer of help

developing rapport

developing rapport

getting what you wantfriends don’t let friends get social engineered

dc_404

appeal to authorityplea for helpoffer of help

developing rapportname dropping

name dropping

getting what you wantlet someone else create the sycophant for you

dc_404

appeal to authorityplea for helpoffer of help

developing rapportname dropping

getting what you wantwhere there’s a will there’s a way

etcetera

dc_404

dc_404

typical scenariowhat does an attack look like?

corporate headquarters, this is judy avalon. how may i direct your call.

dc_404

typical scenariowhat does an attack look like?

hello, this is nate hanson from iron mountain. i was trying to get in touch with the it manager.

dc_404

Typical ScenarioWhat Does an Attack Look Like?

Certainly, Mr. Hanson. I’ll transfer you now.

Thank you.

dc_404

Typical ScenarioWhat Does an Attack Look Like?

You have reached the voicemail of Ted Simmons….

<CLICK>

dc_404

typical scenariowhat does an attack look like?

sunnyvale branch, melanie brooks speaking.

melanie, this is nate hanson from the it department. my boss, ted simmons asked me to call to find out if your location is having problems yet.

dc_404

typical scenariowhat does an attack look like?

no…. that “yet” sounds bad.

yes, ma’am, we think judy avalon’s computer started it. i need you to run some commands for me so your branch won’t be affected.

dc_404

typical scenariowhat does an attack look like?

secret virus

dc_404

typical scenariowhat does an attack look like?

ok, now what?

that’s it, melanie. you saved your branch. thanks a lot!

dc_404

typical scenariowhat does an attack look like?

<printer noises>

social engineering strikes again!

dc_404

tha art of storytellin’ your turn