How to Rob a Bank Over the Phone - Lessons Learned from an Actual Social Engineering Engagement

Explore a real-world social engineering engagement through a 48-minute Black Hat conference talk that combines actual audio recordings with valuable lessons for both social engineers and defenders. Gain insights into identifying and preventing attacks as Joshua Crumbaugh breaks down the techniques used in a bank robbery attempt conducted over the phone. Delve into topics such as reconnaissance, persistence, multiple call strategies, and the importance of sounding authoritative. Learn about the biggest risks in social engineering, including vulnerable user groups like sales and developers, and discover effective training methods to combat these threats. Understand the significance of high-frequency education, culturally-aware training, and integrating security awareness throughout an organization. Analyze the role of personal assistants and the importance of maintaining a vigilant attitude in preventing social engineering attacks.