Technique

social engineering

technique:social_engineering Also: emotional manipulation, false pretext, human hacking, phone scam, pretexting, ruse, scam calls, soc eng, social engineer, social engineering, social-engineer, social-engineering, social-engineering attack, socially-engineering

The technique of persuading users to run a malicious file by presenting it as a game cheat or other desirable program.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming INVOLVES TalkTalk 2014 Webpro data breach Explicit 4
incoming USES Jason E. Street Derived 6
incoming USES Mobman Explicit 20
incoming USES Ira Winkler Explicit 21
incoming USES Stan Explicit 21
incoming USES Tony Explicit 21
incoming INVOLVES Chinese intelligence operation Uncertain 21
incoming USES Snow Explicit 22
incoming USES Social-Engineer Toolkit Explicit 34
incoming USES Tinker Secor Explicit 36
incoming USES Kyle Explicit 40
incoming USES JekHyde Explicit 41
incoming INVOLVES JekHyde and Carl physical penetration engagement Explicit 41
incoming USES Elliot Explicit 42
incoming USES Dave Kennedy Explicit 42
incoming USES Zain Qaiser Explicit 44
incoming USES Reveton Explicit 44
incoming USES TinkerSecure Derived 55
incoming USES Jordan Harbinger Explicit 56
incoming INVOLVES online predator investigation Explicit 56
incoming USES FC Explicit 66
incoming USES John Strand Explicit 67
incoming USES Paint Parrot Explicit 80
incoming USES Cameron Harrison Explicit 85
incoming USES Jenny Radcliffe Explicit 90
incoming USES Brian Halbach Explicit 95
incoming USES Jonathan Studebaker Explicit 95
incoming INITIAL_ACCESS_VIA The Pizza Problem Uncertain 97
incoming INVOLVES Black Cube operation against Citizen Lab Explicit 99
incoming USES Alethe Denis Explicit 107
incoming USES Critical Insight Explicit 107
incoming USES TeaMp0isoN Explicit 109
incoming USES Remo snatching Explicit 112
incoming USES Central Intelligence Agency Explicit 116
incoming USES Joseph Harris Explicit 118
incoming USES Joseph Harris Explicit 118
incoming INVOLVES Axie Infinity cryptocurrency theft Explicit 122
incoming INVOLVES Evaldas Rimasauskas BEC scam Explicit 124
incoming USES Evaldas Rimasauskas Explicit 124
incoming USES Gollumfun Explicit 128
incoming USES Gollumfun Explicit 129
incoming USES Deviant Ollam Explicit 134
incoming INVOLVES Punjab family-impersonation scam Explicit 138
incoming USES Crackas With Attitude Explicit 139
incoming INVOLVES pig butchering Explicit 141
incoming USES Axact Explicit 142
incoming USES technical support scam Derived 143
incoming USES Jim Browning Explicit 143
incoming INVOLVES Social Engineering Contest Explicit 144
incoming USES Rachel Tobac Explicit 144
incoming USES SocialProof Security Explicit 144
incoming INITIAL_ACCESS_VIA Axie Infinity Explicit 147
incoming USES Greg Explicit 150
incoming USES Conor Freeman Explicit 154
incoming USES Maxie Reynolds Explicit 166
incoming USES USDoD Explicit 177

Claims

TalkTalk 2014 Webpro data breach INVOLVES social engineering

The breach involved scam calls in which callers impersonated TalkTalk staff and groomed victims into trusting them.

Explicit Confidence 99% · Jack Rhysider EP 4 Details

“The caller would establish trust with the victim, convincing them they are from TalkTalk”

Jack Rhysider · offsets 6555–6643

Jason E. Street USES social engineering

Jason uses social manipulation and plausible explanations to gain access to offices, teller areas, and computers during engagements.

Derived Confidence 97% · Jason E. Street EP 6 Details

“It’s all psychological.”

Jason E. Street · offsets 15384–15407

“I tell her that yeah, I’m here with the auditor.”

Jason E. Street · offsets 7473–7521

Mobman USES social engineering

Mobman socially engineered players into installing Sub7 by offering it as a game cheat.

Explicit Confidence 99% · Jack Rhysider EP 20 Details

“He was able to social engineer dozens of players to install the virus”

Jack Rhysider · offsets 10592–10661

Ira Winkler USES social engineering

Ira conducted a contract engagement using social engineering against an investment bank.

Explicit Confidence 99% · Jack Rhysider EP 21 Details

“the contract was to use social engineering against an investment bank”

Jack Rhysider · offsets 4600–4669

Stan USES social engineering

Stan used trust-building and conversations to get people to divulge government secrets.

Explicit Confidence 97% · Jack Rhysider EP 21 Details

“over time Stan would build trust with that person and get them to divulge government secrets”

Jack Rhysider · offsets 11843–11935

Tony USES social engineering

Tony is described as using telephone social engineering to elicit information.

Explicit Confidence 99% · Ira Winkler EP 21 Details

“we primarily used him for the telephone social engineering”

Ira Winkler · offsets 9596–9654

Chinese intelligence operation INVOLVES social engineering

The episode describes the suspected operation as using social situations and questions to recruit or pressure people into disclosing information.

Uncertain Confidence 85% · Ira Winkler EP 21 Details

“What they do is they set up a social situation where people come in”

Ira Winkler · offsets 23186–23253

Snow USES social engineering

Snow professionally performs social-engineering assessments for companies.

Explicit Confidence 96% · Snow EP 22 Details

“I started my own consultancy and I’ve worked for a handful of companies doing this work professionally”

Snow · offsets 24840–24954

Social-Engineer Toolkit USES social engineering

The Social-Engineer Toolkit was described as a tool for creating the cloned login page and social-engineering victims.

Explicit Confidence 99% · Jack Rhysider EP 34 Details

“the social engineering toolkit which is a popular hacking tool designed to social engineer a victim”

Jack Rhysider · offsets 33549–33648

Tinker Secor USES social engineering

Tinker impersonated IT over the phone to persuade an employee to disclose a Citrix MFA code.

Explicit Confidence 99% · Tinker Secor EP 36 Details

“I lie to them and then I say hey, I’m somebody else from IT”

Tinker Secor · offsets 27800–27865

“She read it to me. I typed it in within the minute”

Tinker Secor · offsets 35819–35870

Kyle USES social engineering

Kyle and his team use disguises, cover stories, employee branding, and fabricated explanations to appear authorized.

Explicit Confidence 98% · Kyle EP 40 Details

“Typically, you want to dress for the part”

Kyle · offsets 7475–7516

“we’re here dealing with some incident response stuff. We’re with information security.”

Kyle · offsets 54232–54319

JekHyde USES social engineering

JekHyde identifies herself as a social engineer and uses social engineering during physical access engagements.

Explicit Confidence 99% · JekHyde EP 41 Details

“I am a physical penetration tester and social engineer.”

JekHyde · offsets 5443–5498

JekHyde and Carl physical penetration engagement INVOLVES social engineering

The engagement used social engineering to obtain trusted access to the facility.

Explicit Confidence 99% · Jack Rhysider EP 41 Details

“A Red Team assessment.”

Jack Rhysider · offsets 11883–11905

“we exploited the human factor”

JekHyde · offsets 42696–42725

Elliot USES social engineering

In the described Mr. Robot clip, Elliot attempts to social engineer his way into a meeting.

Explicit Confidence 98% · Jack Rhysider EP 42 Details

“tries to social engineer his way into a meeting”

Jack Rhysider · offsets 3303–3350

Dave Kennedy USES social engineering

Dave's security testing work used social engineering, including impersonation and diversion tactics.

Explicit Confidence 99% · Jack Rhysider EP 42 Details

“This is one of Dave’s specialties; social engineering”

Jack Rhysider · offsets 13315–13368

Zain Qaiser USES social engineering

Zain told the Angler creators that he was experienced in social engineering and used manipulation to run the scheme.

Explicit Confidence 99% · Jack Rhysider EP 44 Details

“Zain tells them that he’s experienced in social engineering and that he’s good at manipulating people”

Jack Rhysider · offsets 6243–6344

Reveton USES social engineering

Reveton used fear, embarrassment, and false police or FBI notices as a social-engineering tactic to pressure victims into paying.

Explicit Confidence 99% · Jack Rhysider EP 44 Details

“This is ransomware with a twist of social engineering. It’s a psychological trick, a scare tactic.”

Jack Rhysider · offsets 12637–12736

TinkerSecure USES social engineering

TinkerSecure uses social-engineering pretexts, including pretending to be on a phone call and claiming he needs a desk for a presentation.

Derived Confidence 95% · TinkerSecure EP 55 Details

“I pulled out my phone, pretending to be on a call.”

TinkerSecure · offsets 7050–7105

“I need to prep real quick for a conference presentation, I asked.”

TinkerSecure · offsets 11128–11193

Jordan Harbinger USES social engineering

Jordan identified social engineering as the next step after learning from intercepted conversations and later used it to create a deceptive AOL identity.

Explicit Confidence 99% · Jordan Harbinger EP 56 Details

“the next logical step is social engineering”

Jordan Harbinger · offsets 10264–10307

“Social engineering for the win”

Jordan Harbinger · offsets 24734–24764

online predator investigation INVOLVES social engineering

Jordan used a deceptive, girl-like screen name and conversational baiting as part of the investigation.

Explicit Confidence 98% · Jordan Harbinger EP 56 Details

“I could easily go and get them and bait them into a chat”

Jordan Harbinger · offsets 27879–27935

FC USES social engineering

FC performs social engineering as part of his security work and penetration tests.

Explicit Confidence 99% · FC EP 66 Details

“I’ve done a lot of hacking, a lot of social engineering”

FC · offsets 292–347

John Strand USES social engineering

John describes using social-engineering tactics to help law enforcement locate a kidnapping suspect.

Explicit Confidence 98% · Jack Rhysider EP 67 Details

“what a gnarly way to use social engineering and phishing methods for good”

Jack Rhysider · offsets 23537–23610

Paint Parrot USES social engineering

Paint Parrot described his work as involving social engineering to persuade or deceive people into revealing information or granting access.

Explicit Confidence 99% · Paint Parrot EP 80 Details

“You learn a lot of social engineering ‘cause you’re constantly having to talk your way into places you shouldn’t be”

Paint Parrot · offsets 5963–6078

Cameron Harrison USES social engineering

Cam social-engineered banks by posing as cardholders and changing the phone numbers and addresses associated with accounts.

Explicit Confidence 99% · Jack Rhysider EP 85 Details

“he figured out ways to social engineer some of the banks connected to the cards”

Jack Rhysider · offsets 26035–26114

Jenny Radcliffe USES social engineering

Jenny identifies herself as a social engineer and describes using social engineering in professional security work.

Explicit Confidence 99% · Jenny Radcliffe EP 90 Details

“I’m a social engineer and specialist in the psychology of security.”

Jenny Radcliffe · offsets 1862–1929

“she’s done social engineering and physical infiltration, pen testing”

Jack Rhysider · offsets 2414–2482

Brian Halbach USES social engineering

Brian says he performs social engineering over the phone and in person.

Explicit Confidence 99% · Brian Halbach EP 95 Details

“I also really love social engineering over the phone and in person.”

Brian Halbach · offsets 5207–5274

Jonathan Studebaker USES social engineering

Jonathan explicitly lists social engineering among the activities he performs.

Explicit Confidence 99% · Jonathan Studebaker EP 95 Details

“but also the physicals, the social engineering, phishing, stuff like that.”

Jonathan Studebaker · offsets 5539–5613

The Pizza Problem INITIAL_ACCESS_VIA social engineering

The attackers appear to have gained access by socially engineering mobile-provider representatives; Miles said they manipulated T-Mobile into changing the SIM.

Uncertain Confidence 91% · Miles EP 97 Details

“manipulate their way in through either doing it in person or doing it over the phone”

Miles · offsets 16555–16639

Black Cube operation against Citizen Lab INVOLVES social engineering

The operation used a false pretext about financial solutions for refugees and a fabricated identity to elicit information from Citizen Lab personnel.

Explicit Confidence 99% · John Scott-Railton EP 99 Details

“somebody who claimed to be interested in financial solutions in banking for refugees”

John Scott-Railton · offsets 13735–13819

“this person is obviously coming under a false pretense”

John Scott-Railton · offsets 19761–19815

Alethe Denis USES social engineering

Alethe works in social engineering and describes it as her professional specialty.

Explicit Confidence 99% · Alethe Denis EP 107 Details

“my core interest is growing our social engineering side”

Alethe Denis · offsets 2977–3032

Critical Insight USES social engineering

Critical Insight provides social-engineering engagements to clients.

Explicit Confidence 99% · Jack Rhysider EP 107 Details

“as well as social engineering engagements”

Jack Rhysider · offsets 47819–47860

TeaMp0isoN USES social engineering

TeaMp0isoN used telephone social engineering while impersonating Google employees.

Explicit Confidence 99% · MLT EP 109 Details

“We called them all up, pretending to be from Google”

MLT · offsets 25634–25685

Remo snatching USES social engineering

Before stealing the tablet, attackers allegedly social-engineer the store manager to obtain the manager's password.

Explicit Confidence 99% · Jack Rhysider EP 112 Details

“you need to do recon on the store, figure out everything you can about the manager to try to social-engineer them”

Jack Rhysider · offsets 52418–52531

“They send you a fake URL, you enter your manager login”

Drew · offsets 52690–52744

Central Intelligence Agency USES social engineering

Jack says the CIA uses the same social-engineering techniques used to gather unauthorized data.

Explicit Confidence 99% · Jack Rhysider EP 116 Details

“the CIA uses the exact same techniques to gather foreign intelligence”

Jack Rhysider · offsets 5503–5572

Joseph Harris USES social engineering

Joseph says he began by socially engineering email providers and account owners.

Explicit Confidence 99% · Joseph Harris EP 118 Details

“I started kind of as a social engineer”

Joseph Harris · offsets 5162–5200

Joseph Harris USES social engineering

Joseph used victims’ names and addresses to persuade email providers to reset passwords.

Explicit Confidence 99% · Joseph Harris EP 118 Details

“all you need to know is someone’s name and address and you can completely take over their AOL account”

Joseph Harris · offsets 6507–6608

Axie Infinity cryptocurrency theft INVOLVES social engineering

The Axie Infinity attack involved enticing employees with job offers and manipulating them into opening a document.

Explicit Confidence 97% · Jack Rhysider EP 122 Details

“enticed them with great job offers”

Jack Rhysider · offsets 27136–27170

Evaldas Rimasauskas BEC scam INVOLVES social engineering

The perpetrators used social engineering to gather information about Facebook and Google and their financial processes.

Explicit Confidence 99% · Jack Rhysider EP 124 Details

“they had to do it piece by piece and slowly social-engineer their way into the company”

Jack Rhysider · offsets 5683–5769

Evaldas Rimasauskas USES social engineering

Evaldas and his team used social engineering to obtain information from Facebook, Google, and related companies.

Explicit Confidence 98% · Jack Rhysider EP 124 Details

“they had to do it piece by piece and slowly social-engineer their way into the company”

Jack Rhysider · offsets 5683–5769

Gollumfun USES social engineering

Brett explicitly characterizes himself as a social engineer and manipulator while deceiving his wife and victims.

Explicit Confidence 99% · Brett Johnson EP 128 Details

“I was the social engineer and I was a manipulator”

Brett Johnson · offsets 35483–35532

Gollumfun USES social engineering

Brett used social engineering to distract Secret Service agents during an apartment search and conceal illegal items.

Explicit Confidence 99% · Jack Rhysider EP 129 Details

“Brett tricked the Secret Service agents and took advantage of their trust to social engineer them”

Jack Rhysider · offsets 47104–47201

Deviant Ollam USES social engineering

Deviant describes using impersonation and deception to persuade guards that he was an elevator technician.

Explicit Confidence 99% · Deviant Ollam EP 134 Details

“I lie for a living. I just dropped into it.”

Deviant Ollam · offsets 32461–32504

Punjab family-impersonation scam INVOLVES social engineering

The scam is presented as social engineering in which callers manipulate relatives into sending money.

Explicit Confidence 99% · Jack Rhysider EP 138 Details

“The idea here is simple; the scammer will pose as someone you know and ask you for money.”

Jack Rhysider · offsets 11492–11581

Crackas With Attitude USES social engineering

CWA’s attacks against government personnel primarily used social engineering and information obtained through it.

Explicit Confidence 99% · Default EP 139 Details

“Most of it was just social engineering”

Default · offsets 28097–28135

pig butchering INVOLVES social engineering

The scam uses emotional manipulation and relationship-building to persuade victims to send money.

Explicit Confidence 99% · Jack Rhysider EP 141 Details

“they social-engineered him and tricked him into sending his crypto to the scammer’s wallet”

Jack Rhysider · offsets 8946–9036

Axact USES social engineering

Axact employees used persuasive and deceptive interactions to sell fake degrees and additional services.

Explicit Confidence 96% · Fazal EP 142 Details

“We’d then research that person, look for their social media profiles, try to find out their goals and ambitions, get to know them, then e-mail or call them”

Fazal · offsets 14759–14914

technical support scam USES social engineering

The scam relies on convincing victims that their computers are infected and manipulating them into following the scammers’ instructions.

Derived Confidence 94% · Jack Rhysider EP 143 Details

“They’ll try to convince you that your computer has a virus and they can help”

Jack Rhysider · offsets 4024–4100

Jim Browning USES social engineering

Jim says that much of his method for accessing scammers’ computers relies on social engineering rather than exploiting a zero-day vulnerability.

Explicit Confidence 99% · Jim Browning EP 143 Details

“a lot of it is social engineering as opposed to some zero-day compromise of the remote access software that I’m using”

Jim Browning · offsets 27789–27906

Social Engineering Contest INVOLVES social engineering

The contest involved using social-engineering calls to obtain information from a target company.

Explicit Confidence 99% · Jack Rhysider EP 144 Details

“get enough information to hack into a company, all through phone calls”

Jack Rhysider · offsets 8115–8185

Rachel Tobac USES social engineering

Rachel performs social engineering as her professional specialization and in penetration tests.

Explicit Confidence 99% · Rachel Tobac EP 144 Details

“I do all the human hacking stuff”

Rachel Tobac · offsets 23363–23395

“I’m one of the best social engineers I’ve ever met”

Jack Rhysider · offsets 3900–3948

SocialProof Security USES social engineering

SocialProof Security provides social-engineering penetration testing and security-awareness work for companies.

Explicit Confidence 99% · Jack Rhysider EP 144 Details

“SocialProof Security, which is basically social engineering for hire”

Jack Rhysider · offsets 13982–14050

Axie Infinity INITIAL_ACCESS_VIA social engineering

The reported initial compromise involved an elaborate social-engineering job offer aimed at a Sky Mavis engineer.

Explicit Confidence 98% · Geoff White EP 147 Details

“carried out a very, very elaborate — or at least in my opinion, very elaborate social engineering exercise on this person; offered them a job”

Geoff White · offsets 24706–24847

Greg USES social engineering

Greg describes using the false Sub7-author identity to obtain interviews and access at Capital One and Facebook, calling it social engineering.

Explicit Confidence 98% · Greg EP 150 Details

“that’s pretty good social fucking engineering to get all the way”

Greg · offsets 39476–39540

“I went to Capital One. I went to Facebook.”

Greg · offsets 39166–39208

Conor Freeman USES social engineering

Conor learned and used social engineering to obtain secret-question answers and take over an administrator’s account.

Explicit Confidence 99% · Conor Freeman EP 154 Details

“he socially-engineered the admin of this server into giving him the two answers to his secret questions”

Conor Freeman · offsets 4844–4947

Maxie Reynolds USES social engineering

Maxie describes her first entry into full social engineering and penetration testing in Australia.

Explicit Confidence 98% · Maxie Reynolds EP 166 Details

“My first entry point into full social engineer, really, and pen testing, was in Australia”

Maxie Reynolds · offsets 7310–7399

USDoD USES social engineering

USDoD tried to gain access to the PEO network by impersonating and socially engineering one of its developers.

Explicit Confidence 99% · Jack Rhysider EP 177 Details

“He tried getting access through the developer using social engineering techniques”