Advanced Phishing Tactics - Beyond User Awareness

Explore advanced phishing tactics and strategies that go beyond traditional user awareness in this conference talk from Hack3rcon 2012. Delve into the world of spear phishing, including high-profile examples like White House targeting. Learn about pentesting methodologies, statistics, and target research techniques. Discover email harvesting methods, creating convincing fake emails, and developing effective attack scenarios. Examine the importance of email subject lines, layout, and attack vectors in successful phishing campaigns. Gain insights into changing WHOIS data, selecting payloads, and post-exploitation techniques. Watch a live demonstration and understand why conventional user awareness approaches often fall short. Explore practical solutions for limiting exposure, including network segmentation strategies.