Dive into advanced phishing tactics that go beyond basic user awareness in this conference talk from SkyDogCon 2012. Explore the world of spearfishing, including its targets, motivations, and statistics. Learn about email harvesting techniques, scenario creation, and the intricacies of crafting convincing phishing emails. Discover various attack vectors, website creation methods, and payload selection strategies. Gain insights into post-exploitation techniques, testing procedures, and the limitations of user education and patching. Understand the importance of comprehensive cybersecurity measures to combat sophisticated phishing attempts.
Overview
Syllabus
Mentors
Agenda
Who am I
What is spearfishing
Spearfishing victims
Why spearfishing
Statistics
Targets
Email Harvesting
Jigsaw
Step 15 Filter
Step 16 Create Scenario
Step 17 Create Email
Phishing Email
Attack Vectors
Creating the Website
Changing Whois Information
Choosing the Payload
PostExploitation
Testing
User Education
Patching
User Awareness
Summary
