WeAreDevelopers LIVE • Oct 12, 2020

Getting under the skin: The Social Engineering techniques

Mauro Verderosa

It is notoriously difficult to patch a human. Firewalls fail when employees willingly share keys. Discover how social engineers turn innocent social posts into corporate breaches.

Pause

Mute

Enter Fullscreen

#1 about 6 min

How an insider staged a massive historical bank heist

A consultant exploited physical proximity to steal backup procedures and wire out millions before modern cybersecurity.

#2 about 5 min

Motivational categories behind modern cybercriminal activities

Threat actors target organizations for financial gain, corporate espionage, political manipulation, ideological terrorism, and recreational hacking.

#3 about 5 min

Defining social engineering and its monumental historical impact

Hackers leverage psychological manipulation rather than technical exploits to bypass defenses and execute monumental breaches.

#4 about 7 min

Standard attack vectors used in social engineering campaigns

Pretexting, spear phishing, baiting, and tailgating enable adversaries to sneak past digital perimeters without complex exploits.

#5 about 3 min

Weaponizing basic human psychological triggers for system access

Intruders bypass standard access controls by manufacturing artificial situations that elicit panic, guilt, or compliance.

#6 about 2 min

Evaluating phishing emails that leverage artificial time constraints

Email phishing campaigns fake authentic services and invent artificial deadlines to force immediate compliance from victims.

#7 about 3 min

Vishing techniques leveraging synthetic environments and human compassion

Attackers inject synthetic background noise to feign distress and manipulate customer support agents into unlocking critical accounts.

#8 about 2 min

Spear phishing IT administrators with malicious VoIP spoofing

Phone spoofing impersonates internal business lines to coerce privileged IT staff into executing unauthorized administrative payloads.

#9 about 4 min

Sequential lifecycle phases of complex social engineering attacks

A structured compromise advances systematically from open-source intelligence gathering through lateral movement toward footprint obfuscation.

#10 about 6 min

Aggregating disjointed personal details to execute identity theft

Patient mapping of a target's physical routine and social media history yields the requisite answers for password resets.

#11 about 6 min

Defending enterprise perimeters with continuous security awareness training

Combating manipulation requires continuously reshaping organizational culture because standard technological patches cannot adequately fix human vulnerabilities.

Matching moments

3:42 min

Understanding modern social engineering and fraud techniques

George Proorocu

George Proorocu +1 · World Congress 2024

2:52 min

Analyzing social engineering exploits in decentralized finance platforms

Chris Heilmann

Chris Heilmann +2 · LIVE

6:36 min

Defensive strategies against AI-driven social engineering

Wolfgang Ettlinger +1 · World Congress 2023

3:23 min

Mitigating social engineering and identifying technical security resources

Vandana Verma · LIVE

3:05 min

Enhancing social engineering and phishing with generative AI

Chris Wysopal

Chris Wysopal +2 · World Congress 2024

58 sec

Future realities of AI in social engineering

Wolfgang Ettlinger +1 · World Congress 2023

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail

about 1 month ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

Skynet wants your Passwords! The Role of AI in Automating Social Engineering thumbnail

World Congress 2023 • almost 3 years ago

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger, Alexander Hurbean

Deep Fakes: The Lies We Can’t See thumbnail

World Congress 2024 • about 2 years ago

Deep Fakes: The Lies We Can’t See

George Proorocu, Mihai Roman

Synthetic Insiders: The New AI Risk to Your Org thumbnail

World Congress 2026 Europe • 3 months ago

Synthetic Insiders: The New AI Risk to Your Org

George Proorocu

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail

World Congress 2026 Europe • 3 months ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

MFA? Game over! Watch your protection collapse – live thumbnail

World Congress 2026 Europe • 3 months ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

Coffee With Developers • 7 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

7 months ago

From learning to earning

Jobs that call for the skills explored in this talk.

23 days ago • Verified

SoC Offensive Security Staff Engineer

Austin, United States

Experienced $198k–268k Remote Network Security

about 2 months ago

Senior Threat Intelligence Analyst

Expert Profiling Cybercrime Mitre Att&ck

Cyber Defense - Detection Engineering - Manager

New York, NY, United States

Expert $99k–232k Malware Cybercrime Cyber Warfare

about 2 months ago

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases

about 2 months ago

Identity, Defense & Resilience - Network Security - Manager

San Jose, CA, United States

Expert $99k–232k Cybercrime Cyber Security Network Security

about 2 months ago

Identity, Defense & Resilience - Network Security - Manager

San Francisco, CA, United States

Expert $99k–232k Cybercrime Cyber Security Network Security