Technique
social engineering
technique:social_engineering
Also: emotional manipulation, false pretext, human hacking, phone scam, pretexting, ruse, scam calls, soc eng, social engineer, social engineering, social-engineer, social-engineering, social-engineering attack, socially-engineering
The technique of persuading users to run a malicious file by presenting it as a game cheat or other desirable program.
Explore relationships
Mentioned in
EP 4
Derived
99%
Fraud technique in which callers established trust, impersonated TalkTalk, and induced victims to transfer money.
“The caller would establish trust with the victim, convincing them they are from TalkTalk”
Jack Rhysider ·
offsets 6555–6643
“The scammer would tell the victim that TalkTalk accidentally overpaid them”
Jack Rhysider ·
offsets 7074–7148
EP 6
Derived
98%
Manipulation of employees through plausible identities, authority claims, and conversational pretexts to obtain access.
“I’m here with the auditor. We’re doing an audit on the computer systems from head office.”
Jason E. Street ·
offsets 7495–7585
“I tell her I need to get into the network halls. I’m doing some work for headquarters.”
Jason E. Street ·
offsets 16194–16281
EP 20
Explicit
100%
The technique of persuading users to run a malicious file by presenting it as a game cheat or other desirable program.
“You’re looking for other cheater – people that want to cheat in the game. You tell them that you have the cheat for them.”
Mobman ·
offsets 8146–8268
“You have to convince somebody to open the file and run it”
Mobman ·
offsets 12602–12659
EP 21
Explicit
100%
Manipulation of people to obtain information, credentials, access, or cooperation without relying solely on technical exploitation.
“Basically the contract was to use social engineering against an investment bank”
Jack Rhysider ·
offsets 4590–4669
“That’s how Ira’s career got started as a social engineer and penetration tester.”
Jack Rhysider ·
offsets 6596–6676
EP 22
Explicit
100%
Manipulation of people to obtain information, access, or trust during security assessments.
“I found the social engineering village”
Snow ·
offsets 25157–25195
“The main ones that I do are physical security, phishing ... vishing”
Snow ·
offsets 30900–30985
EP 34
Explicit
100%
Manipulating victims into visiting fraudulent login pages or revealing account information.
“a popular hacking tool designed to social engineer a victim”
Jack Rhysider ·
offsets 33589–33648
EP 36
Explicit
100%
Manipulation of an employee by impersonating IT to obtain a multi-factor authentication code.
“when I’m doing a soc eng or social engineering attack”
Tinker Secor ·
offsets 36798–36851
“through a solid social engineering exploit”
Tinker Secor ·
offsets 36447–36489
EP 40
Derived
98%
Using employee roles, uniforms, company materials, plausible stories, and social behavior to gain access or avoid scrutiny.
“by having this list of names and roles, it can help him out if he needs to drop a name or try to lie his way into the building”
Jack Rhysider ·
offsets 6501–6627
“we dressed like we belonged”
Kyle ·
offsets 59200–59245
EP 41
Explicit
100%
Manipulation of people into granting access or performing actions for an attacker or tester.
“In order to do physical penetration testing or social engineering”
JekHyde ·
offsets 7880–7945
“it’s exploiting the human factor”
JekHyde ·
offsets 10833–10865
EP 42
Explicit
100%
Manipulation and impersonation techniques used to obtain physical access, information, or network access.
“Social engineering, the deceptively benign-sounding name for tricking people into giving up their passwords”
Jack Rhysider ·
offsets 5751–5858
“This is one of Dave’s specialties; social engineering”
Jack Rhysider ·
offsets 13315–13368
EP 44
Explicit
100%
Manipulation and intimidation of victims to induce payment, relying on embarrassment, shame, and fear.
“It’s an example of social engineering at its best, or maybe its worst.”
Jack Rhysider ·
offsets 1505–1575
“This is ransomware with a twist of social engineering.”
Jack Rhysider ·
offsets 12637–12691
EP 55
Derived
97%
Obtaining physical access by appearing to belong in the facility and relying on employees to open doors.
“Often, if you smile, folks will open the door for you.”
TinkerSecure ·
offsets 3664–3718
“when a simple smile opened the door”
TinkerSecure ·
offsets 13019–13054
EP 56
Explicit
100%
Using interpersonal interaction, deception, persuasion, and relationship-building to influence people or obtain a desired outcome.
“the next logical step is social engineering”
Jordan Harbinger ·
offsets 10264–10307
“Social engineering for the win, right?”
Jordan Harbinger ·
offsets 24734–24772
EP 59
Explicit
100%
Manipulation of employees or other people through pretexts and deceptive interactions to obtain access or information.
“physical exploits to gain access to facilities”
Justin Wynn ·
offsets 2907–2953
“a big part of that was testing the employees”
Justin Wynn ·
offsets 5168–5212
“do social engineering”
Justin Wynn ·
offsets 5232–5253
EP 66
Explicit
100%
Manipulation of people through impersonation, deception, or interaction to obtain information or access.
“This typically involves a lot of social engineering”
Jack Rhysider ·
offsets 4779–4830
“You only have to slip in, you only have to get in once”
EP 67
Explicit
100%
Manipulation of people and trusted processes to obtain access or information, including the use of an official-looking food-service inspection ruse.
“what a ruse is”
John Strand ·
offsets 25034–25048
“a ruse with authority”
John Strand ·
offsets 25279–25300
“what a gnarly way to use social engineering and phishing methods for good”
Jack Rhysider ·
offsets 23537–23610
EP 80
Explicit
100%
Psychological persuasion and pretexting used to obtain information, access, or cooperation.
“someone who can persuade other people to do things they don’t want to do through different psychological tricks”
Jack Rhysider ·
offsets 2211–2322
“This is what we’d call human intelligence, but it’s basically social engineering”
Paint Parrot ·
offsets 23963–24043
EP 85
Explicit
100%
Impersonating cardholders and manipulating banks to change contact details and approve fraudulent transactions.
“he figured out ways to social engineer some of the banks connected to the cards.”
Jack Rhysider ·
offsets 26035–26115
EP 90
Explicit
100%
Use of human psychology and manipulation to gain access, information, or compliance.
“I’m a social engineer and specialist in the psychology of security.”
Jenny Radcliffe ·
offsets 1862–1929
“We just need a social engineer.”
Jenny Radcliffe ·
offsets 38658–38689
EP 95
Explicit
100%
Manipulation or impersonation used to gain access or information, including by phone or in person.
“I also really love social engineering over the phone and in person.”
Brian Halbach ·
offsets 5207–5274
“the social engineering, phishing, stuff like that”
Jonathan Studebaker ·
offsets 5563–5612
EP 97
Explicit
100%
Manipulation of people or support staff to obtain information or induce a mobile provider to change a SIM.
“Miles thinks that’s what happened to him; the hacker spent some time putting together a target profile, then they were able to launch an informed social-engineering attack on him.”
Jack Rhysider ·
offsets 16316–16495
“They were able to get ahold of T-Mobile and manipulate their way in”
Miles ·
offsets 16511–16578
EP 99
Derived
99%
Use of deceptive identities, pretexts, and conversations to elicit information or damaging statements from targets.
“this person is obviously coming under a false pretense”
John Scott-Railton ·
offsets 19761–19815
“what the guy really wants to do is not talk about refugees and banking”
John Scott-Railton ·
offsets 14124–14194
EP 106
Explicit
100%
Manipulation of people into disclosing information or taking actions that benefit an attacker.
“this feels like a social engineering sort of thing”
EP 107
Explicit
100%
Manipulation of people to disclose information or perform actions that support access or other objectives.
“manipulate people to get them to do things that you want them to do”
Jack Rhysider ·
offsets 14250–14317
“the psychology behind social engineering”
Alethe Denis ·
offsets 46895–46935
EP 109
Explicit
100%
Manipulation of BlackBerry employees by impersonating Google and obtaining Gmail password-reset codes over the phone.
“I was just curious to learn that particular method of social engineering.”
MLT ·
offsets 27494–27567
EP 112
Explicit
100%
Manipulation of employees or account holders to obtain credentials, codes, or account actions.
“to try to social-engineer them.”
Jack Rhysider ·
offsets 52501–52532
EP 116
Explicit
100%
Persuasion and manipulation used to obtain information from people who are not authorised to share it.
“there’s social engineering techniques to gather data that they’re not authorized to have.”
Jack Rhysider ·
offsets 5408–5497
EP 118
Explicit
100%
Manipulation of email providers, telecommunications companies, and support staff to reset credentials or activate attacker-controlled devices.
“I started kind of as a social engineer”
Joseph Harris ·
offsets 5162–5200
“trying to social engineer the e-mail providers to reset the password”
Jack Rhysider ·
offsets 6665–6733
EP 122
Derived
98%
Manipulation of people through apparently credible relationships, job offers, shared interests, or emotional appeals to obtain information or access.
“a way to social-engineer someone to get access into that company”
Jack Rhysider ·
offsets 27451–27515
“used against her to get her to leak lots of sensitive documents”
Jack Rhysider ·
offsets 39911–39974
EP 124
Explicit
100%
Manipulation of employees or business contacts to obtain organizational, financial, or payment information.
“slowly social-engineer their way into the company”
Jack Rhysider ·
offsets 5720–5769
“try to social-engineer them to give you more information”
Jack Rhysider ·
offsets 3600–3655
EP 128
Explicit
100%
Manipulation of victims or associates to obtain trust, money, or compliance.
“I was the social engineer and I was a manipulator”
Brett Johnson ·
offsets 35483–35532
EP 129
Derived
100%
Manipulation of people to influence their actions or prevent them from discovering criminal activity.
“Brett tricked the Secret Service agents and took advantage of their trust to social engineer them”
Jack Rhysider ·
offsets 47104–47201
EP 134
Explicit
100%
Manipulation or deception of people to gain access, information, or assistance.
“here, he tricked a guard into making him think he worked for the elevator company”
Jack Rhysider ·
offsets 39227–39308
EP 138
Derived
99%
Manipulation of victims through personal details, emotional pressure, secrecy, urgency, and fabricated emergencies.
“the scammer will pose as someone you know and ask you for money.”
Jack Rhysider ·
offsets 11517–11581
“when a scammer tries to isolate you and get you to not tell anyone else”
Jack Rhysider ·
offsets 20084–20155
EP 139
Explicit
100%
Manipulation of support personnel or account holders to obtain information or reset credentials.
“Most of it was just social engineering”
Default ·
offsets 28097–28135
“pose as a technician on-site trying to help out a customer”
Jack Rhysider ·
offsets 32454–32512
EP 141
Derived
100%
Manipulation of victims' emotions, trust, and perceptions to induce communication, payments, or other actions.
“they social-engineered him and tricked him into sending his crypto”
Jack Rhysider ·
offsets 8946–9012
“They understand that they need to influence a person’s emotions”
Ronnie Tokazowski ·
offsets 22128–22191
EP 142
Derived
99%
Using personal information, fabricated roles, urgency, deception, and targeted persuasion to obtain payments.
“The more information we know about them, the easier it is to sell them on the degree.”
Fazal ·
offsets 13762–13847
“we’d call them posing as the local government”
Jack Rhysider ·
offsets 34700–34748
EP 143
Explicit
100%
Manipulation of people to obtain access or information rather than exploiting a technical vulnerability.
“a lot of it is social engineering as opposed to some zero-day compromise”
Jim Browning ·
offsets 27789–27861
EP 144
Explicit
100%
Human-focused manipulation used to obtain information, access, or account control through communication and pretexts.
“It’s the exact same skill that you use every month to get the bill lowered”
Rachel Tobac ·
offsets 7287–7361
EP 147
Explicit
100%
Technique used to manipulate a Sky Mavis engineer through a fraudulent job-recruitment process.
“a very, very elaborate social engineering exercise on this person”
Geoff White ·
offsets 24700–24766
“offered them a job”
Geoff White ·
offsets 24829–24847
EP 150
Explicit
100%
Technique Greg says he used to gain access to business interviews by presenting himself as the creator of Sub7.
“that’s pretty good social fucking engineering to get all the way”
Greg ·
offsets 39476–39540
EP 151
Derived
95%
Manipulation of trusted relationships and physical access practices to gain access to people, buildings, and systems.
“A white guy in a suit with a laptop with, you know, someone holding lots of books, someone will open the door for them”
Chris Rock ·
offsets 21986–22104
“we would target Level 3, Level 2, and then ... Level 1”
Chris Rock ·
offsets 18800–18870
EP 154
Explicit
100%
Manipulating people or support personnel into disclosing information or performing account changes.
“he was also partaking in social engineering”
Conor Freeman ·
offsets 3898–3941
“That was the first experience of socially engineering someone.”
Conor Freeman ·
offsets 6377–6439
EP 166
Explicit
100%
Manipulation or impersonation used to obtain access during a penetration test.
“a pen test but with a social engineering component”
Maxie Reynolds ·
offsets 7750–7800
“red-teaming, penetration testing, social engineering”
Jack Rhysider ·
offsets 26239–26291
EP 169
Explicit
99%
Manipulation of people over telephone systems to obtain information or access.
“dial someone, social-engineer them”
Jack Rhysider ·
offsets 19976–20010
EP 177
Explicit
100%
Manipulation of a developer to obtain access to the PEO network.
“He tried getting access through the developer using social engineering techniques”
Jack Rhysider ·
offsets 15656–15737
EP 179
Explicit
100%
Technique identified as part of the physical security testing work performed by the testers.
“which often entails social engineering, physical exploits to gain access to facilities”
Justin Wynn ·
offsets 7350–7436
Relationships
Claims
TalkTalk 2014 Webpro data breach
INVOLVES
social engineering
The breach involved scam calls in which callers impersonated TalkTalk staff and groomed victims into trusting them.
Explicit
Confidence 99%
· Jack Rhysider
EP 4
Details
“The caller would establish trust with the victim, convincing them they are from TalkTalk”
Jack Rhysider ·
offsets 6555–6643
Jason E. Street
USES
social engineering
Jason uses social manipulation and plausible explanations to gain access to offices, teller areas, and computers during engagements.
Derived
Confidence 97%
· Jason E. Street
EP 6
Details
“It’s all psychological.”
Jason E. Street ·
offsets 15384–15407
“I tell her that yeah, I’m here with the auditor.”
Jason E. Street ·
offsets 7473–7521
Mobman
USES
social engineering
Mobman socially engineered players into installing Sub7 by offering it as a game cheat.
Explicit
Confidence 99%
· Jack Rhysider
EP 20
Details
“He was able to social engineer dozens of players to install the virus”
Jack Rhysider ·
offsets 10592–10661
Ira Winkler
USES
social engineering
Ira conducted a contract engagement using social engineering against an investment bank.
Explicit
Confidence 99%
· Jack Rhysider
EP 21
Details
“the contract was to use social engineering against an investment bank”
Jack Rhysider ·
offsets 4600–4669
Stan
USES
social engineering
Stan used trust-building and conversations to get people to divulge government secrets.
Explicit
Confidence 97%
· Jack Rhysider
EP 21
Details
“over time Stan would build trust with that person and get them to divulge government secrets”
Jack Rhysider ·
offsets 11843–11935
Tony
USES
social engineering
Tony is described as using telephone social engineering to elicit information.
Explicit
Confidence 99%
· Ira Winkler
EP 21
Details
“we primarily used him for the telephone social engineering”
Ira Winkler ·
offsets 9596–9654
Chinese intelligence operation
INVOLVES
social engineering
The episode describes the suspected operation as using social situations and questions to recruit or pressure people into disclosing information.
Uncertain
Confidence 85%
· Ira Winkler
EP 21
Details
“What they do is they set up a social situation where people come in”
Ira Winkler ·
offsets 23186–23253
Snow
USES
social engineering
Snow professionally performs social-engineering assessments for companies.
Explicit
Confidence 96%
· Snow
EP 22
Details
“I started my own consultancy and I’ve worked for a handful of companies doing this work professionally”
Snow ·
offsets 24840–24954
Social-Engineer Toolkit
USES
social engineering
The Social-Engineer Toolkit was described as a tool for creating the cloned login page and social-engineering victims.
Explicit
Confidence 99%
· Jack Rhysider
EP 34
Details
“the social engineering toolkit which is a popular hacking tool designed to social engineer a victim”
Jack Rhysider ·
offsets 33549–33648
Tinker Secor
USES
social engineering
Tinker impersonated IT over the phone to persuade an employee to disclose a Citrix MFA code.
Explicit
Confidence 99%
· Tinker Secor
EP 36
Details
“I lie to them and then I say hey, I’m somebody else from IT”
Tinker Secor ·
offsets 27800–27865
“She read it to me. I typed it in within the minute”
Tinker Secor ·
offsets 35819–35870
Kyle
USES
social engineering
Kyle and his team use disguises, cover stories, employee branding, and fabricated explanations to appear authorized.
Explicit
Confidence 98%
· Kyle
EP 40
Details
“Typically, you want to dress for the part”
“we’re here dealing with some incident response stuff. We’re with information security.”
Kyle ·
offsets 54232–54319
JekHyde
USES
social engineering
JekHyde identifies herself as a social engineer and uses social engineering during physical access engagements.
Explicit
Confidence 99%
· JekHyde
EP 41
Details
“I am a physical penetration tester and social engineer.”
JekHyde ·
offsets 5443–5498
JekHyde and Carl physical penetration engagement
INVOLVES
social engineering
The engagement used social engineering to obtain trusted access to the facility.
Explicit
Confidence 99%
· Jack Rhysider
EP 41
Details
“A Red Team assessment.”
Jack Rhysider ·
offsets 11883–11905
“we exploited the human factor”
JekHyde ·
offsets 42696–42725
Elliot
USES
social engineering
In the described Mr. Robot clip, Elliot attempts to social engineer his way into a meeting.
Explicit
Confidence 98%
· Jack Rhysider
EP 42
Details
“tries to social engineer his way into a meeting”
Jack Rhysider ·
offsets 3303–3350
Dave Kennedy
USES
social engineering
Dave's security testing work used social engineering, including impersonation and diversion tactics.
Explicit
Confidence 99%
· Jack Rhysider
EP 42
Details
“This is one of Dave’s specialties; social engineering”
Jack Rhysider ·
offsets 13315–13368
Zain Qaiser
USES
social engineering
Zain told the Angler creators that he was experienced in social engineering and used manipulation to run the scheme.
Explicit
Confidence 99%
· Jack Rhysider
EP 44
Details
“Zain tells them that he’s experienced in social engineering and that he’s good at manipulating people”
Jack Rhysider ·
offsets 6243–6344
Reveton
USES
social engineering
Reveton used fear, embarrassment, and false police or FBI notices as a social-engineering tactic to pressure victims into paying.
Explicit
Confidence 99%
· Jack Rhysider
EP 44
Details
“This is ransomware with a twist of social engineering. It’s a psychological trick, a scare tactic.”
Jack Rhysider ·
offsets 12637–12736
TinkerSecure
USES
social engineering
TinkerSecure uses social-engineering pretexts, including pretending to be on a phone call and claiming he needs a desk for a presentation.
Derived
Confidence 95%
· TinkerSecure
EP 55
Details
“I pulled out my phone, pretending to be on a call.”
TinkerSecure ·
offsets 7050–7105
“I need to prep real quick for a conference presentation, I asked.”
TinkerSecure ·
offsets 11128–11193
Jordan Harbinger
USES
social engineering
Jordan identified social engineering as the next step after learning from intercepted conversations and later used it to create a deceptive AOL identity.
Explicit
Confidence 99%
· Jordan Harbinger
EP 56
Details
“the next logical step is social engineering”
Jordan Harbinger ·
offsets 10264–10307
“Social engineering for the win”
Jordan Harbinger ·
offsets 24734–24764
online predator investigation
INVOLVES
social engineering
Jordan used a deceptive, girl-like screen name and conversational baiting as part of the investigation.
Explicit
Confidence 98%
· Jordan Harbinger
EP 56
Details
“I could easily go and get them and bait them into a chat”
Jordan Harbinger ·
offsets 27879–27935
FC
USES
social engineering
FC performs social engineering as part of his security work and penetration tests.
Explicit
Confidence 99%
· FC
EP 66
Details
“I’ve done a lot of hacking, a lot of social engineering”
John Strand
USES
social engineering
John describes using social-engineering tactics to help law enforcement locate a kidnapping suspect.
Explicit
Confidence 98%
· Jack Rhysider
EP 67
Details
“what a gnarly way to use social engineering and phishing methods for good”
Jack Rhysider ·
offsets 23537–23610
Paint Parrot
USES
social engineering
Paint Parrot described his work as involving social engineering to persuade or deceive people into revealing information or granting access.
Explicit
Confidence 99%
· Paint Parrot
EP 80
Details
“You learn a lot of social engineering ‘cause you’re constantly having to talk your way into places you shouldn’t be”
Paint Parrot ·
offsets 5963–6078
Cameron Harrison
USES
social engineering
Cam social-engineered banks by posing as cardholders and changing the phone numbers and addresses associated with accounts.
Explicit
Confidence 99%
· Jack Rhysider
EP 85
Details
“he figured out ways to social engineer some of the banks connected to the cards”
Jack Rhysider ·
offsets 26035–26114
Jenny Radcliffe
USES
social engineering
Jenny identifies herself as a social engineer and describes using social engineering in professional security work.
Explicit
Confidence 99%
· Jenny Radcliffe
EP 90
Details
“I’m a social engineer and specialist in the psychology of security.”
Jenny Radcliffe ·
offsets 1862–1929
“she’s done social engineering and physical infiltration, pen testing”
Jack Rhysider ·
offsets 2414–2482
Brian Halbach
USES
social engineering
Brian says he performs social engineering over the phone and in person.
Explicit
Confidence 99%
· Brian Halbach
EP 95
Details
“I also really love social engineering over the phone and in person.”
Brian Halbach ·
offsets 5207–5274
Jonathan Studebaker
USES
social engineering
Jonathan explicitly lists social engineering among the activities he performs.
Explicit
Confidence 99%
· Jonathan Studebaker
EP 95
Details
“but also the physicals, the social engineering, phishing, stuff like that.”
Jonathan Studebaker ·
offsets 5539–5613
The Pizza Problem
INITIAL_ACCESS_VIA
social engineering
The attackers appear to have gained access by socially engineering mobile-provider representatives; Miles said they manipulated T-Mobile into changing the SIM.
Uncertain
Confidence 91%
· Miles
EP 97
Details
“manipulate their way in through either doing it in person or doing it over the phone”
Miles ·
offsets 16555–16639
Black Cube operation against Citizen Lab
INVOLVES
social engineering
The operation used a false pretext about financial solutions for refugees and a fabricated identity to elicit information from Citizen Lab personnel.
Explicit
Confidence 99%
· John Scott-Railton
EP 99
Details
“somebody who claimed to be interested in financial solutions in banking for refugees”
John Scott-Railton ·
offsets 13735–13819
“this person is obviously coming under a false pretense”
John Scott-Railton ·
offsets 19761–19815
Alethe Denis
USES
social engineering
Alethe works in social engineering and describes it as her professional specialty.
Explicit
Confidence 99%
· Alethe Denis
EP 107
Details
“my core interest is growing our social engineering side”
Alethe Denis ·
offsets 2977–3032
Critical Insight
USES
social engineering
Critical Insight provides social-engineering engagements to clients.
Explicit
Confidence 99%
· Jack Rhysider
EP 107
Details
“as well as social engineering engagements”
Jack Rhysider ·
offsets 47819–47860
TeaMp0isoN
USES
social engineering
TeaMp0isoN used telephone social engineering while impersonating Google employees.
Explicit
Confidence 99%
· MLT
EP 109
Details
“We called them all up, pretending to be from Google”
MLT ·
offsets 25634–25685
Remo snatching
USES
social engineering
Before stealing the tablet, attackers allegedly social-engineer the store manager to obtain the manager's password.
Explicit
Confidence 99%
· Jack Rhysider
EP 112
Details
“you need to do recon on the store, figure out everything you can about the manager to try to social-engineer them”
Jack Rhysider ·
offsets 52418–52531
“They send you a fake URL, you enter your manager login”
Drew ·
offsets 52690–52744
Central Intelligence Agency
USES
social engineering
Jack says the CIA uses the same social-engineering techniques used to gather unauthorized data.
Explicit
Confidence 99%
· Jack Rhysider
EP 116
Details
“the CIA uses the exact same techniques to gather foreign intelligence”
Jack Rhysider ·
offsets 5503–5572
Joseph Harris
USES
social engineering
Joseph says he began by socially engineering email providers and account owners.
Explicit
Confidence 99%
· Joseph Harris
EP 118
Details
“I started kind of as a social engineer”
Joseph Harris ·
offsets 5162–5200
Joseph Harris
USES
social engineering
Joseph used victims’ names and addresses to persuade email providers to reset passwords.
Explicit
Confidence 99%
· Joseph Harris
EP 118
Details
“all you need to know is someone’s name and address and you can completely take over their AOL account”
Joseph Harris ·
offsets 6507–6608
Axie Infinity cryptocurrency theft
INVOLVES
social engineering
The Axie Infinity attack involved enticing employees with job offers and manipulating them into opening a document.
Explicit
Confidence 97%
· Jack Rhysider
EP 122
Details
“enticed them with great job offers”
Jack Rhysider ·
offsets 27136–27170
Evaldas Rimasauskas BEC scam
INVOLVES
social engineering
The perpetrators used social engineering to gather information about Facebook and Google and their financial processes.
Explicit
Confidence 99%
· Jack Rhysider
EP 124
Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Jack Rhysider ·
offsets 5683–5769
Evaldas Rimasauskas
USES
social engineering
Evaldas and his team used social engineering to obtain information from Facebook, Google, and related companies.
Explicit
Confidence 98%
· Jack Rhysider
EP 124
Details
“they had to do it piece by piece and slowly social-engineer their way into the company”
Jack Rhysider ·
offsets 5683–5769
Gollumfun
USES
social engineering
Brett explicitly characterizes himself as a social engineer and manipulator while deceiving his wife and victims.
Explicit
Confidence 99%
· Brett Johnson
EP 128
Details
“I was the social engineer and I was a manipulator”
Brett Johnson ·
offsets 35483–35532
Gollumfun
USES
social engineering
Brett used social engineering to distract Secret Service agents during an apartment search and conceal illegal items.
Explicit
Confidence 99%
· Jack Rhysider
EP 129
Details
“Brett tricked the Secret Service agents and took advantage of their trust to social engineer them”
Jack Rhysider ·
offsets 47104–47201
Deviant Ollam
USES
social engineering
Deviant describes using impersonation and deception to persuade guards that he was an elevator technician.
Explicit
Confidence 99%
· Deviant Ollam
EP 134
Details
“I lie for a living. I just dropped into it.”
Deviant Ollam ·
offsets 32461–32504
Punjab family-impersonation scam
INVOLVES
social engineering
The scam is presented as social engineering in which callers manipulate relatives into sending money.
Explicit
Confidence 99%
· Jack Rhysider
EP 138
Details
“The idea here is simple; the scammer will pose as someone you know and ask you for money.”
Jack Rhysider ·
offsets 11492–11581
Crackas With Attitude
USES
social engineering
CWA’s attacks against government personnel primarily used social engineering and information obtained through it.
Explicit
Confidence 99%
· Default
EP 139
Details
“Most of it was just social engineering”
Default ·
offsets 28097–28135
pig butchering
INVOLVES
social engineering
The scam uses emotional manipulation and relationship-building to persuade victims to send money.
Explicit
Confidence 99%
· Jack Rhysider
EP 141
Details
“they social-engineered him and tricked him into sending his crypto to the scammer’s wallet”
Jack Rhysider ·
offsets 8946–9036
Axact
USES
social engineering
Axact employees used persuasive and deceptive interactions to sell fake degrees and additional services.
Explicit
Confidence 96%
· Fazal
EP 142
Details
“We’d then research that person, look for their social media profiles, try to find out their goals and ambitions, get to know them, then e-mail or call them”
Fazal ·
offsets 14759–14914
technical support scam
USES
social engineering
The scam relies on convincing victims that their computers are infected and manipulating them into following the scammers’ instructions.
Derived
Confidence 94%
· Jack Rhysider
EP 143
Details
“They’ll try to convince you that your computer has a virus and they can help”
Jack Rhysider ·
offsets 4024–4100
Jim Browning
USES
social engineering
Jim says that much of his method for accessing scammers’ computers relies on social engineering rather than exploiting a zero-day vulnerability.
Explicit
Confidence 99%
· Jim Browning
EP 143
Details
“a lot of it is social engineering as opposed to some zero-day compromise of the remote access software that I’m using”
Jim Browning ·
offsets 27789–27906
Social Engineering Contest
INVOLVES
social engineering
The contest involved using social-engineering calls to obtain information from a target company.
Explicit
Confidence 99%
· Jack Rhysider
EP 144
Details
“get enough information to hack into a company, all through phone calls”
Jack Rhysider ·
offsets 8115–8185
Rachel Tobac
USES
social engineering
Rachel performs social engineering as her professional specialization and in penetration tests.
Explicit
Confidence 99%
· Rachel Tobac
EP 144
Details
“I do all the human hacking stuff”
Rachel Tobac ·
offsets 23363–23395
“I’m one of the best social engineers I’ve ever met”
Jack Rhysider ·
offsets 3900–3948
SocialProof Security
USES
social engineering
SocialProof Security provides social-engineering penetration testing and security-awareness work for companies.
Explicit
Confidence 99%
· Jack Rhysider
EP 144
Details
“SocialProof Security, which is basically social engineering for hire”
Jack Rhysider ·
offsets 13982–14050
Axie Infinity
INITIAL_ACCESS_VIA
social engineering
The reported initial compromise involved an elaborate social-engineering job offer aimed at a Sky Mavis engineer.
Explicit
Confidence 98%
· Geoff White
EP 147
Details
“carried out a very, very elaborate — or at least in my opinion, very elaborate social engineering exercise on this person; offered them a job”
Geoff White ·
offsets 24706–24847
Greg
USES
social engineering
Greg describes using the false Sub7-author identity to obtain interviews and access at Capital One and Facebook, calling it social engineering.
Explicit
Confidence 98%
· Greg
EP 150
Details
“that’s pretty good social fucking engineering to get all the way”
Greg ·
offsets 39476–39540
“I went to Capital One. I went to Facebook.”
Greg ·
offsets 39166–39208
Conor Freeman
USES
social engineering
Conor learned and used social engineering to obtain secret-question answers and take over an administrator’s account.
Explicit
Confidence 99%
· Conor Freeman
EP 154
Details
“he socially-engineered the admin of this server into giving him the two answers to his secret questions”
Conor Freeman ·
offsets 4844–4947
Maxie Reynolds
USES
social engineering
Maxie describes her first entry into full social engineering and penetration testing in Australia.
Explicit
Confidence 98%
· Maxie Reynolds
EP 166
Details
“My first entry point into full social engineer, really, and pen testing, was in Australia”
Maxie Reynolds ·
offsets 7310–7399
USDoD
USES
social engineering
USDoD tried to gain access to the PEO network by impersonating and socially engineering one of its developers.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“He tried getting access through the developer using social engineering techniques”
Jack Rhysider ·
offsets 15656–15737