Hacking People’s Mind: When Threat Actors Master Social Engineering
summary
Claims a post‑COVID spike in RAT and phishing activity with concrete examples: Nanocore infections rise, commercial RATs and legitimate remote‑access tools abused for lateral movement, and Zoom is exploited via DLL hijacking. Shows a lab remote overlay malware demo (ExoBot/Ginp) that presents fake screens, captures credentials twice and intercepts SMS OTPs, and a C2 dashboard listing victims and stolen creds. Notes phishing kits generate thousands of URLs via randomized folders and suggests automated detection like mouse‑movement delays and ML analysis of page code.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:29Agenda
- 2:00Digital Transformation
- 2:37Rising Threats
- 3:22The Present
- 5:50Tools
- 6:48Access Tools
- 8:55Attachments
- 9:32Backdoor
- 14:00Fishing
- 20:21Mobile
- 22:38Actors perspective
- 26:12Copy 19 changes
- 27:29Leverage AI
related talks
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
56mHacking your Mind and Emotions
42mStart Covering Your Bases And Stop Chasing APT Headlines
52mRansomware 101: Get Smart Understanding Real Attacks
17mRadRAT: An all-in-one toolkit for complex espionage ops
49mThe State Of Malware From The Eye Of The Tiger
42mKeynote: The Expanding Universe of Cyber Threats
33mOperation GamblingPuppet: Analysis of a Multivector and Multiplatform Campaign Targeting Online ...