WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Oct 6, 2023

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger , Alexander Hurbean

Could your team spot a phishing lure dynamically generated by an autonomous LLM? Learn why passkeys are your only defense when AI makes malicious content indistinguishable from reality.

Pause
Mute Enter Fullscreen
#1 about 1 min

Future realities of AI in social engineering

How artificial intelligence could automate phishing and scale social engineering attacks in the near future.

#2 about 2 min

Dual usage of machine learning in cybersecurity

How AI tools can be leveraged for both detecting threats and developing automated malicious campaigns.

#3 about 2 min

Eroding trust through artificial media generation

How highly realistic, artificially generated images and audio complicate the verification of digital identities.

#4 about 2 min

Real-world voice cloning and targeted fraud cases

How attackers use cloned voices for CEO fraud and highly targeted family emergency scams.

#5 about 4 min

Scaling malicious tasks with autonomous AI agents

How agents like AutoGPT can be repurposed to perpetually scale scams, phishing, and fake chats.

#6 about 3 min

Designing an automated phishing attack pipeline

The theoretical steps for building a system that gathers target intelligence to perpetually distribute personalized phishing.

#7 about 3 min

Bypassing safety filters with conversational jailbreaks

Exploiting prompt injection and community-found jailbreaks to override restrictions on commercial AI platforms.

#8 about 4 min

Architecture for automated targeted phishing campaigns

Designing a system that uses large language models alongside service enumerators to craft convincing email payloads.

#9 about 5 min

Configuring local models and service enumerators

Utilizing an open-source text generation web UI to orchestrate prompts and identify target infrastructure.

#10 about 4 min

Demonstrating the automated targeted phishing software

Observing a proof of concept automatically generate tailored lures based on a victim's specific domain records and software usage.

#11 about 7 min

Defensive strategies against AI-driven social engineering

Enhancing security postures through passwordless authentication, verified digital signatures, and prompt injection counter-attacks.

Matching moments

3:05 min

Enhancing social engineering and phishing with generative AI

Chris Wysopal Chris Wysopal +2 · World Congress 2024

1:23 min

Automating compromised roles through AI agents and backup scammers

George Proorocu George Proorocu · World Congress 2026 Europe

8:04 min

Understanding AI chatbot vulnerabilities and stateful attacks

Sebastian Messingfeld Sebastian Messingfeld · World Congress 2026 Europe

2:12 min

Open-source voice cloning and deepfake vulnerabilities

Chris Heilmann +3 · LIVE

2:46 min

Bypassing language model safeguards utilizing contextual prompt injection attacks

Chris Heilmann +1 · LIVE

3:09 min

Distinguishing AI-assisted users from experienced security professionals

Michele Zuccala Michele Zuccala +4 · World Congress 2026 Europe

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Stage 4

Managing Abuse in the Era of AI Agents

Eli-Shaoul Khedouri

CEO, Intuition Machines

Eli-Shaoul Khedouri
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 5

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

September 24, 2026 · 17:30–18:00

Stage 5

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

September 24, 2026 · 14:25–14:35

Outdoor Stage

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

September 24, 2026 · 13:30–14:00

Stage 6

AI vs. AI: Defending the open source supply chain with agentic workflows

Manfred Moser

Senior Principal DevRel Engineer at Chainguard

Manfred Moser
Open session

World Congress 2026 North America

September 24, 2026 · 16:10–16:40

Stage 3

Responsible AI Architecture with Zero Trust Agents

Ashok Prakash

Staff ML Engineer at Apple

Ashok Prakash

Related videos

Synthetic Insiders: The New AI Risk to Your Org thumbnail
24:46
World Congress 2026 Europe • about 2 months ago

Synthetic Insiders: The New AI Risk to Your Org

George Proorocu

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

Getting under the skin: The Social Engineering techniques thumbnail
43:56
LIVE • almost 6 years ago

Getting under the skin: The Social Engineering techniques

Mauro Verderosa

Fighting the Next Wave of Cybercrime thumbnail
30:27
World Congress 2026 Europe • about 2 months ago

Fighting the Next Wave of Cybercrime

Michele Zuccala, Misha Bragin, Ross Kukulinski, Frank Schlesinger, Tomislav Tipurić

Hacking AI - how attackers impose their will on AI thumbnail
27:02
World Congress 2023 • almost 3 years ago

Hacking AI - how attackers impose their will on AI

Mirko Ross

WWC24 - Chris Wysopal, Helmut Reisinger and Johannes Steger - Fighting Digital Threats in the Age of AI thumbnail
24:14
World Congress 2024 • about 2 years ago

WWC24 - Chris Wysopal, Helmut Reisinger and Johannes Steger - Fighting Digital Threats in the Age of AI

Chris Wysopal, Helmut Reisinger, Johannes Steger

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.