Please Pick Up: Crafting and Executing Successful Vishing Attacks
summary
Vishing uses OSINT to find direct phone numbers and gated documents then call with a tight pretext and spoofed phone numbers to extract internal details; techniques shown include Google filetype:pdf, LinkedIn, YouTube office tours, Maps street view, Wigle/WiFi scans, DNSDumpster and Shodan. Presenter reports writing 100+ pages of OSINT reports, placing second then first in a DEF CON vishing contest, and demonstrates live that indexed PDFs can reveal contacts and that simple corporate IT urgency often succeeds despite formal awareness training.
AI-written summary · about
chapters (9)
- 0:00Introduction to Vishing
- 1:49Social Engineering Competition
- 2:55Open Source Intelligence Basics
- 7:50Social Media for Targeting
- 10:19Technical OSINT Tools
- 11:48Developing Pretexts
- 16:20Live OSINT Demo on Disney
- 21:51Professional Applications
- 25:45Q&A Session
related talks
38mExploits in Wetware
29mVishing, Likejacking, Quishing and Other Pickup Techniques
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
44mHacking Humans: Social Engineering Techniques
29mOSINT: A Practical Guide to Safe and Effective Threat Investigation.
50mHacking Humans : Social Engineering Techniques and How to Protect Against Them
17mOSINT to Compromise
22mPhishy Little Liars - Pretexts That Kill