Social Engineering: Hacking Humans
summary
Lists breaches (Facebook $99M, Ubiquiti $39.1M, Toyota $37M) and a supply‑chain incident that compromises 18 npm packages, two billion downloads via a backdoor worm, shows a payroll scam that redirected half a million diverted (90% later refunded), and describes live social exploits—QR code proxy that logs fetches, conference elicitation revealing an environment of only three servers, and a DefCon-style call that hijacks account access. Walks through OSINT, pretexting, QR/URL tricks and recommends five defenses: awareness, risk assessment, hygiene, redundancy and reporting.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 1:35From exploits to human manipulation
- 4:02Real-world incidents
- 6:29Why attacks succeed
- 7:10Common targets
- 10:00Chaining attacks
- 13:36Initial vectors
- 16:53Information gathering
- 19:21Elicitation and psychological manipulation
- 22:20Rules of elicitation attacks
- 24:46Live elicitation demo
- 30:02Pretexting tactics
- 34:00Persuasion techniques
- 34:45Human weaknesses exploited
- 38:38Weaknesses in customer service
- 42:15Defensive strategies
- 49:16Five pillars of defense
- 53:34Security hygiene and planning
- 57:50Summary
related talks
46mSocial Engineering: Hacking Humans
55mSocial Engineering: Hacking Humans
44mHacking Humans: Social Engineering Techniques
41mHacking Humans : Social Engineering Techniques and How to Protect Against Them
50mHacking Humans : Social Engineering Techniques and How to Protect Against Them
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
51mSocial Engineering: Hacking People
55mHacking Humans