Stanley Mark Rifkin exploited procedural manuals and used pretexting to steal millions from a bank without any technical hacking.
Cyber attacks are driven by distinct goals, including financial gain, business competition, political influence, ideology, or simple curiosity.
Social engineering is the psychological manipulation of people to divulge information, as seen in major breaches at companies like RSA and Sony.
Attackers use various methods like pretexting, phishing, baiting, and tailgating to trick victims into compromising security.
Attacks succeed by exploiting human emotions and cognitive biases such as authority, guilt, panic, desire, and greed.
A simple phishing email is analyzed for pressure tactics, followed by a vishing example where an attacker impersonates a spouse to gain account access.
A successful attack follows distinct phases, from initial reconnaissance and scanning to lateral movement, data exfiltration, and finally covering tracks.
An elaborate attack demonstrates how gathering small, public details from social media and real-world observation leads to a full account compromise.
The most effective defense against social engineering is continuous employee training and fostering a security-aware culture to patch the human vulnerability.
2:08:06Antonio de Mello & Amine Abed
29:34Reto Kaeser
37:32Martin Schmiedecker
40:38Anna Bacher
31:19Wolfgang Ettlinger & Alexander Hurbean
57:47Fabien Vauchelles
58:19Michael Koppmann
27:32Jasmin Azemović
Jobs that call for the skills explored in this talk.
Barcelona, Spain
freiheit.com freiheit.com
Pflegecampus21 GmbH