social engineering: tricks & tools - · pdf filesocial engineering: tricks & tools...
TRANSCRIPT
![Page 1: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/1.jpg)
Social Engineering: Tricks & Tools Joe NagyJohn Nye
![Page 2: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/2.jpg)
Social Engineering"You try to make an emotional connection with the person on the other side to create a sense of trust. That is the whole idea: to create a sense of trust and then exploiting it.” – Kevin Mitnick
![Page 3: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/3.jpg)
SE Framework Information Gathering Develop Relationship
Trust Execution
Manipulation Exploitation
Game Over
![Page 4: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/4.jpg)
Sources / Methods Websites Search Engines Whois Social Media Blogs Background Sites Dumpster Diving
Jedi Mind Tricks Elicitation Pretexting Rapport NLP Microexpressions Interview /
Interrogate
![Page 5: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/5.jpg)
SE Tools Intel Gathering
TheHarvester BasKet Nmap Cameras Maltego GPS Tracker –
Cree.py Caller ID Spoofing
Vulnerability Assessment Metasploit Nessus
Exploitation Tools SEToolkit MSFvenom
![Page 6: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/6.jpg)
PhishingA deceptive computer-based means to trick individuals into disclosing sensitive personal information. To perform a phishing attack, an attacker creates a Web site or e-mail that looks as if it is from a well-known organization, such as an online business, credit card company, or financial institution. Source: NIST 800-83
![Page 7: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/7.jpg)
TargetName: Mickey MouseAlias: Steamboat WillieDOB: 18 Nov 1928Wife: Minnie MouseHalf Brother: OswaldNephews:
Mortimer “Morty”Ferdinand “Ferdie”
Dog: Pluto Location: Disneyland, CAQuote: “Oh, boy!”
![Page 8: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/8.jpg)
BaitFrom: OswaldSubject: Morty & FerdieDate: January 27, 2015 12:13:36 AM PDTTo: Mickey
Mickey,
I just heard that Morty and Ferdie were at Disneyland this past weekend and got the measles! This is terrible news! It is all over the internet, take a look: http://www.cbsnews.com/news/measles-outbreak-traced-to-disneyland-continues-to-grow/
I hope they get well soon! Let me know if you need anything.
Oswald
![Page 9: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/9.jpg)
Bank Hackers Steal Millions via Malware
http://www.nytimes.com/2015/02/15/world/bank-hackers-steal-millions-via-malware.html?_r=1&referrer=
Real World Example
![Page 10: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/10.jpg)
BasKet
![Page 11: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/11.jpg)
TheHarvester
![Page 12: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/12.jpg)
SEToolkit
![Page 13: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/13.jpg)
SEToolkit
![Page 14: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/14.jpg)
Cloning the Site
![Page 15: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/15.jpg)
Original Article
![Page 16: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/16.jpg)
Cloned Article
![Page 17: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/17.jpg)
Injecting the Badness
![Page 18: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/18.jpg)
Mousetrap Set
![Page 19: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/19.jpg)
Resourceshttp://www.ic3.gov/default.aspx
Report Phishinghttp://www.antiphishing.org
Awareness and Educationhttp://www.stopthinkconnect.org
Awareness and Educationhttp://www.consumer.ftc.gov/features/featur
e-0014-identity-theft Identity Theft
![Page 20: Social Engineering: Tricks & Tools - · PDF fileSocial Engineering: Tricks & Tools Joe Nagy John Nye. ... Develop Relationship ... Jedi Mind Tricks](https://reader033.vdocuments.us/reader033/viewer/2022050804/5a9f48187f8b9a67178c9b8f/html5/thumbnails/20.jpg)
Social Engineering: Tricks & Tools Joe NagyJohn Nye