social engineering Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/social-engineering Exploring the intersection of cybersecurity, psychology, and resilience. Wed, 16 Feb 2022 20:30:17 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.4 https://jeanchristophvonoertzen.com/wp-content/uploads/2020/10/favicon-4.png social engineering Archives - Jean-Christoph von Oertzen https://jeanchristophvonoertzen.com/tag/social-engineering 32 32 Webinar takeaway – Nuclear Ransomware 3.0: We Thought It Was Bad and Then It Got Even Worse https://jeanchristophvonoertzen.com/webinar-takeaway-nuclear-ransomware-3-0-we-thought-it-was-bad-and-then-it-got-even-worse https://jeanchristophvonoertzen.com/webinar-takeaway-nuclear-ransomware-3-0-we-thought-it-was-bad-and-then-it-got-even-worse#respond Wed, 19 Jan 2022 20:26:26 +0000 https://jeanchristophvonoertzen.com/?p=598 My key takeaways PC Cyborg AIDS trojan in 1998 => first known ransomware $189 asked as ransom CryptoLocker, 2013 first to ask for Bitcoin "Ransomware 2.0", from 2019 made backups less of a protection the access to the victim becomes the "gold" Todays ransomware workflow stager look around (trickbot) and calling home (C2 server) if […]

The post Webinar takeaway – Nuclear Ransomware 3.0: We Thought It Was Bad and Then It Got Even Worse appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-nuclear-ransomware-3-0-we-thought-it-was-bad-and-then-it-got-even-worse/feed 0 Event takeaway: Layer8 Conference https://jeanchristophvonoertzen.com/event-takeaway-layer8-conference https://jeanchristophvonoertzen.com/event-takeaway-layer8-conference#respond Fri, 08 Oct 2021 22:59:07 +0000 https://jeanchristophvonoertzen.com/?p=564 My key takeaways HUMINT phrases to identify background characteristics an interesting OSINT aspect in conversation is special prononciation of certain words identifying the persons origin List of words of identifiers per language The great casino heist: key takeaways from my first big social engineering engagement "get out of jail"-cards must be signed to work career […]

The post Event takeaway: Layer8 Conference appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaway-layer8-conference/feed 0 Event takeaways: BSidesMeSh21 – day 1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1 https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1#respond Mon, 21 Jun 2021 16:34:29 +0000 https://jeanchristophvonoertzen.com/?p=507 My key takeaways Security in sprints vs whole security sprints? Smaller activities from the very beginning. It is not full time, but always ongoing. And maybe, if the situation is very tricky, entire sprints might be necessary, too. — Thomas Fricke Kubernetes does its best to be secure inside. Unfortunatly it is not configured so […]

The post Event takeaways: BSidesMeSh21 – day 1 appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/event-takeaways-bsidesmesh21-day-1/feed 0 Webinar takeaways: Deepfakes – Gefahren und Herausforderungen https://jeanchristophvonoertzen.com/webinar-takeaways-deepfakes-gefahren-und-herausforderungen https://jeanchristophvonoertzen.com/webinar-takeaways-deepfakes-gefahren-und-herausforderungen#respond Fri, 18 Jun 2021 16:42:17 +0000 https://jeanchristophvonoertzen.com/?p=495 My key takeaways the fragmentation of the media landscape made deepfakes relevant deepfakes still need a lot of training material no data, no deep fake voice is still an issue (delay, monotonie), but AI technology is developing fast attackers may just find someone with a similar voice then trying to generate the voice artificially the […]

The post Webinar takeaways: Deepfakes – Gefahren und Herausforderungen appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaways-deepfakes-gefahren-und-herausforderungen/feed 0 Webinar takeaway: Learn to Detect and Defend Against Supply Chain Attacks Before They Compromise Your Network https://jeanchristophvonoertzen.com/webinar-takeaway-learn-to-detect-and-defend-against-supply-chain-attacks-before-they-compromise-your-network https://jeanchristophvonoertzen.com/webinar-takeaway-learn-to-detect-and-defend-against-supply-chain-attacks-before-they-compromise-your-network#respond Wed, 16 Jun 2021 19:35:55 +0000 https://jeanchristophvonoertzen.com/?p=481 My key takeaways First trojan probably was implemented 1983 by Ken Thompson, who invented Unix, C,.. He also warned back then: "You can’t trust code that you did not totally create yourself" Brand new hardware from the factory can be infected by malicious code as well Also open source software is constantly compromised example of […]

The post Webinar takeaway: Learn to Detect and Defend Against Supply Chain Attacks Before They Compromise Your Network appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-learn-to-detect-and-defend-against-supply-chain-attacks-before-they-compromise-your-network/feed 0 Webinar takeaway: Setting the Trap – Crafty Ways the Bad Guys Trick Your Users to Own Your Network https://jeanchristophvonoertzen.com/webinar-takeaway-setting-the-trap-crafty-ways-the-bad-guys-trick-your-users-to-own-your-network https://jeanchristophvonoertzen.com/webinar-takeaway-setting-the-trap-crafty-ways-the-bad-guys-trick-your-users-to-own-your-network#respond Wed, 26 May 2021 19:23:04 +0000 https://jeanchristophvonoertzen.com/?p=465 My key takeaways Hafnium exploited the vulnerability shortly after M$ showed it in the MAP program group. Coincidence? A DC usually runs DNS, so easy to find for an attacker patch before the FBI will do it for you pretexting might be even more effective then phishing example: Teenager compromised Twitters god mode panel through […]

The post Webinar takeaway: Setting the Trap – Crafty Ways the Bad Guys Trick Your Users to Own Your Network appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-setting-the-trap-crafty-ways-the-bad-guys-trick-your-users-to-own-your-network/feed 0 Webinar Takeaway: Why a Security Awareness Program Isn’t Enough to Secure Your Network https://jeanchristophvonoertzen.com/webinar-takeaway-why-a-security-awareness-program-isnt-enough-to-secure-your-network https://jeanchristophvonoertzen.com/webinar-takeaway-why-a-security-awareness-program-isnt-enough-to-secure-your-network#respond Tue, 27 Apr 2021 18:25:53 +0000 https://jeanchristophvonoertzen.com/?p=437 My key takeaways Humans are the de-facto top choice for cybercriminals seeking to gain access into an organization. Security Awareness & frequent simulated social engineering testing is a proven method to reduce your organization’s phish prone percentage. The ideal situation for a cyber criminal or social engineer is to hijack the OODA loop by creating […]

The post Webinar Takeaway: Why a Security Awareness Program Isn’t Enough to Secure Your Network appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-why-a-security-awareness-program-isnt-enough-to-secure-your-network/feed 0 WEBINAR TAKEAWAY: When the Bad Guys Hide in Plain Sight: Hacking Platforms You Know and Trust https://jeanchristophvonoertzen.com/webinar-takeaway-when-the-bad-guys-hide-in-plain-sight-hacking-platforms-you-know-and-trust https://jeanchristophvonoertzen.com/webinar-takeaway-when-the-bad-guys-hide-in-plain-sight-hacking-platforms-you-know-and-trust#respond Wed, 09 Dec 2020 20:40:43 +0000 https://jeanchristophvonoertzen.com/?p=289 MY KEY TAKEAWAYS already 20 years ago, Kevin Mitnick testified before US Senate and highlighted social engineering and the need for training. Still today changing human behaviour is most times the weakest point. threat actors have almost unlimited time to do extensive research before an attack, so they are extremly good at buidling the trust […]

The post WEBINAR TAKEAWAY: When the Bad Guys Hide in Plain Sight: Hacking Platforms You Know and Trust appeared first on Jean-Christoph von Oertzen.

]]> https://jeanchristophvonoertzen.com/webinar-takeaway-when-the-bad-guys-hide-in-plain-sight-hacking-platforms-you-know-and-trust/feed 0