Spear Phishing the Masses: When Open Data is Dark
summary
Argues that real-time context stitching of public records, blogs, forum posts and duplicate identifiers lets attackers assemble tailored lures automatically — example: two email addresses linked by a page, then a Barcelona travel PDF attached to a message from a mutual contact — raising click rates and infections at scale (moving from one-off GhostNet-style picks to “one computer on millions”). Targets include net admins, executives, staff and family; defenses lag because attackers exploit short timing windows.
AI-written summary · about
chapters (5)
- 0:00The future of data usage
- 1:06Understanding context
- 3:03Automated spear fishing
- 4:48Evolution of cyber attacks
- 5:18Challenges and implications
related talks
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
41mHook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait
42mWeaponizing Data Science for Social Engineering: Automated E2E Spear Phishing on Twitter
30mSecurity Starts With You: Social Engineering
49mBeyond Takeover: Attacker’s in. Now what?
40mWeb Attacks and Fraud: Lessons Learned from the Deep End of the Pool
32mSomething’s Phishy: See the Hook Before the Bait
30mThe Hidden Layer of Cyberattacks