Phishy Little Liars - Pretexts That Kill
summary
Shows how to use OSINT to build fast, target-specific pretexts that actually work: comb Glassdoor, LinkedIn, corporate videos, geotagged Instagram and image backgrounds, then apply Google dorks and Foursquare notes to compile a one-page playbook. Examples include a charitable giving pretext that wins an email address and commitment to open a PDF, a cafeteria vendor walk-in pretext, and a VPN/computer-update email; prep time ranges from an hour to a few hours (CTF reports took 100+ hours).
AI-written summary · about
chapters (19)
- 0:00Introduction
- 0:33Overview
- 1:25Disclaimer
- 5:14Corporate Review Websites
- 6:35Social Media
- 7:45Corporate Giving Manager
- 8:33Facts
- 8:53Foursquare
- 9:24Sample pretext format
- 10:03Notes
- 10:26Who You Are
- 10:48Motivations
- 11:02Elements
- 12:24Empathy pretext
- 16:09Why custom pretexts are important
- 17:04Creative pretexts
- 18:11Fishing training
- 19:10How much time do you need
- 20:17Free resources
related talks
38mExploits in Wetware
16mSocial Engineering: Tactics and Techniques
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
31mPlease Pick Up: Crafting and Executing Successful Vishing Attacks
07mSpear Phishing the Masses: When Open Data is Dark
29mFake Hires, Real Threats: When Background Checks Aren’t Enough
41mCompromising a Fortune 500 Business without Hacking a Thing!
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking