The Dark Arts of Social Engineering

null BangaloreThe Dark Arts of Social Engineering

Primary informationName: Nutan Kumar Panda aka @TheOsintGuyJob Profile: Information Security Engineer Github Profile: https://github.com/nkpandaCo-author: Hacking Web IntelligenceHobbies: Riding bike, Playing keyboard, Watching Movies

Black list agendaPhishingVishingPretextingShoulder SurfingDumpster divingSpammingHacking Gmail/ Facebook/ Watsapp accounts

3

The story behind this presentation

4

What is social Engineering?

Who are Social engineers?

Why social engineering?

7

Where it is widely used?

8

Basic example

The next level

10

3 Steps of social Engineering

How to create a layout

12

Pointers to create layout

13

The plan B

14

Profiling

http://freemind.sourceforge.net/wiki/index.php/Main_Page

15

Old school style

16

Attack

17

espionage

18

DOX

19

Scam

https://www.youtube.com/watch?v=_dj_90TnVbohttp://indianexpress.com/article/entertainment/bollywood/actor-karan-singh-grover-falls-prey-to-nigerian-online-lottery-scam/

20

Interesting pointershttps://www.trustwave.com/Resources/SpiderLabs-Blog/Hacking-a-Reporter--Writing-Malware-For-Fun-and-Profit-(Part-1-of-3)/https://www.trustwave.com/Resources/SpiderLabs-Blog/Hacking-a-Reporter--UK-Edition/?page=1&year=0&month=0http://www.welivesecurity.com/2015/12/22/manager-bikes-stolen-cycling-app-reveals-home-address/http://readwrite.com/2010/08/23/i_can_stalk_u_new_site_posts_exacts_locations_of_twitter_users_posting_geotagged_photoshttp://www.buzzfeed.com/jimwaterson/your-iphone-knows-exactly-where-youve-been-and-this-is-how-t#.wspQX53BDhttp://blog.ioactive.com/2014/05/glass-reflections-in-pictures-osint.html

21

Share less surf moreDo not share much information as public such that are associated with security questions.Do not use geo tag.Do not repeat a check in or a place you visit often in social media.Do not post pictures un necessarily.Do not reply mails, messages asking username/password/or verification code.Accept that you are not that lucky to get lottery which you never applied for.Do not download apps such as fb+ or linkedin+ which are not from the creators.Do not challenge or boast in social media, there are many legends of internet.Go enjoy you life and do not waste much on your virtual life.

22

Any queries?

Thanks