Mauro Verderosa

Getting under the skin: The Social Engineering techniques

What is the one security vulnerability that can't be patched? The human. Learn the psychological tricks attackers use to bypass your best defenses.

Getting under the skin: The Social Engineering techniques
#1about 7 minutes

The 1978 heist that pioneered social engineering

Stanley Mark Rifkin exploited procedural manuals and used pretexting to steal millions from a bank without any technical hacking.

#2about 3 minutes

Understanding the five main motivations for cybercrime

Cyber attacks are driven by distinct goals, including financial gain, business competition, political influence, ideology, or simple curiosity.

#3about 5 minutes

What social engineering is and its real-world impact

Social engineering is the psychological manipulation of people to divulge information, as seen in major breaches at companies like RSA and Sony.

#4about 7 minutes

An overview of common social engineering attack techniques

Attackers use various methods like pretexting, phishing, baiting, and tailgating to trick victims into compromising security.

#5about 2 minutes

Psychological triggers that make social engineering effective

Attacks succeed by exploiting human emotions and cognitive biases such as authority, guilt, panic, desire, and greed.

#6about 4 minutes

Deconstructing real-world phishing and vishing attacks

A simple phishing email is analyzed for pressure tactics, followed by a vishing example where an attacker impersonates a spouse to gain account access.

#7about 5 minutes

Understanding the complete social engineering attack lifecycle

A successful attack follows distinct phases, from initial reconnaissance and scanning to lateral movement, data exfiltration, and finally covering tracks.

#8about 6 minutes

A step-by-step case study from Mr. Robot

An elaborate attack demonstrates how gathering small, public details from social media and real-world observation leads to a full account compromise.

#9about 5 minutes

Key takeaways and defenses against social engineering

The most effective defense against social engineering is continuous employee training and fostering a security-aware culture to patch the human vulnerability.

Related jobs
Jobs that call for the skills explored in this talk.

Remote

Name of

Name of

Remote
Intermediate
PHP
Java
+1

Matching moments

Demonstrating deepfake attacks and social engineering
03:11 MIN

Demonstrating deepfake attacks and social engineering

The AI Elections: How Technology Could Shape Public Sentiment

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
A social engineering attack using a personal email
03:16 MIN

A social engineering attack using a personal email

Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
Why developers make basic cybersecurity mistakes
02:26 MIN

Why developers make basic cybersecurity mistakes

Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
Q&A on social engineering and a career in security
27:22 MIN

Q&A on social engineering and a career in security

Stranger Danger: Your Java Attack Surface Just Got Bigger

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
Why attackers use prompt injection techniques
05:38 MIN

Why attackers use prompt injection techniques

Manipulating The Machine: Prompt Injections And Counter Measures

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
How attackers use AI to refactor exploits
04:40 MIN

How attackers use AI to refactor exploits

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
From vulnerability researcher to automated security founder
05:31 MIN

From vulnerability researcher to automated security founder

The transformative impact of GenAI for software development and its implications for cybersecurity

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.
A real-world case of deepfake job interview phishing
01:21 MIN

A real-world case of deepfake job interview phishing

Deep Fakes: The Lies We Can’t See

Unlock Moments
Create a free account to watch a limited number of Moments each month.
Upgrade to PRO for unlimited access to the full archive.

Featured Partners

Related Videos

See all videos
The attacker's footprint2:08:06

The attacker's footprint

Antonio de Mello & Amine Abed

You can’t hack what you can’t see29:34

You can’t hack what you can’t see

Reto Kaeser

Cyber Security: Small, and Large!37:32

Cyber Security: Small, and Large!

Martin Schmiedecker

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR40:38

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR

Anna Bacher

Skynet wants your Passwords! The Role of AI in Automating Social Engineering31:19

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger & Alexander Hurbean

Cracking the Code: Decoding Anti-Bot Systems!57:47

Cracking the Code: Decoding Anti-Bot Systems!

Fabien Vauchelles

Typed Security: Preventing Vulnerabilities By Design58:19

Typed Security: Preventing Vulnerabilities By Design

Michael Koppmann

Security Pitfalls for Software Engineers27:32

Security Pitfalls for Software Engineers

Jasmin Azemović

Related Articles

View all articles
CH
Chris Heilmann
Dev Digest 138 - Are you secure about this?
Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of security. Enjoy! News and ArticlesGoogle Pixel phones t...
Dev Digest 138 - Are you secure about this?
LM
Luis Minvielle
9 Ways to Make Money Hacking
Cybercrime is still a currency black hole. Industry insiders report, year after year, how companies lose trillions of dollars each year to hacking, scams, and data breaches. This is a huge problem, which also means that if you can do something about ...
9 Ways to Make Money Hacking
CH
Chris Heilmann
Dev Digest 134 - Where pixels sing?
News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Security Risks, Data Privacy in LLMs and get a chance to t...
Dev Digest 134 - Where pixels sing?
CH
Chris Heilmann
Dev Digest 116 - WWWAI?
This time, learn how to un-AI Google's search results, what's new on the web, avoid a new security hole and go back to BASICS with us. News and ArticlesWhat a week. Google, Microsoft, OpenAI and many others had their big flagship events announcing th...
Dev Digest 116 - WWWAI?

From learning to earning

Jobs that call for the skills explored in this talk.