Blog · tag

#social-engineering

7 posts tagged #social-engineering.

RSS · Atom · JSON Feed · All posts

  1. Hacking people, not computers: what Kevin Mitnick taught

    Four Twitter employees took a phone call and 130 accounts fell. Kevin Mitnick described that move, pretexting, in 2002. What the pattern looks like from the receiving end, three documented cases, and the call-back rule that beats it.

  2. The CEO on the video call was not real: deepfake fraud 2024-2026

    An Arup employee sent US$25.6 million after a video call where nobody was real. Deepfake fraud against companies and families, the documented cases from Arup to a cloned Italian minister, and the cheap rules that beat any fake.

  3. What my honeypots reveal about how attackers think

    One machine knocked on my honeypot 17,066 times in under nine hours. Eight months of counts show how automated attackers think: speed over skill, a few persistent machines, no sleep, and lists that follow fashion.

  4. Pig butchering: the romance and investment scams run from compounds

    A $15 billion bitcoin seizure, 120,000 people held in Myanmar compounds, $8.6 billion in US investment-fraud losses. How pig butchering works from the victim's side, who types the messages, and the signs to stop early.

  5. High-control groups: how cults recruit and hold people

    918 people died at Jonestown, yet only about 4% of Unification Church workshop attendees were full-time members two years on. How high-control groups recruit and hold people, the checklists, the scholarly critics, and the warning signs.

  6. Deepfakes and voice clones: what changed from 2023 to 2026

    A cloned Biden voice called New Hampshire voters in 2024; a fake audio clip hit Slovakia's 2023 election. Their effect on results is not shown. People catch fake voices about 73% of the time and detectors falter on real fakes. Verification beats detection.

  7. Urgency, authority, scarcity: the six levers in every scam

    Americans reported losing $20.9 billion to online crime in 2025. Most of it was handed over, not hacked. Cialdini's six levers mapped onto real scams, what phishing research found, and why a pause beats them all.