Social Engineering

How could Twitter have stopped the attack? (Part 2)

How could Twitter have stopped the attack? (Part 2)

Posted on 2020-07-22by mattin Business Security, Social Engineering


Last week Twitter had a successful social engineering attack that pushed through a Bitcoin scam. The scam netted about $120k for the scammers, but for Twitter it caused huge damage to their brand with the news of this attack going around the world.

Continue reading
How could Twitter have stopped the attack? (Part 1)

How could Twitter have stopped the attack? (Part 1)

Posted on 2020-07-21by mattin Business Security, Social Engineering


Last week Twitter had a successful social engineering attack that pushed through a Bitcoin scam. The scam netted about $120k for the scammers, but for Twitter it caused huge damage to their brand with the news of this attack going around the world.

Continue reading
The value of experience (or "don't fire the person that got phished")

The value of experience (or "don't fire the person that got phished")

Posted on 2020-01-15by mattin Social Engineering


When performing social engineering attacks, physical intrusion attacks, or red teams we have to be particularly careful. At all times we have to be aware that we’re not dealing with emotionless systems here, but with real people who are often just trying to do their jobs. What’s more, the people on the other end can feel mislead, manipulated, and betrayed. Perhaps the hardest challenge of designing an effective user awareness programme is getting the desired outcome of increased security when you’re dealing with real people. People who have emotions and potentially unpredictable behaviours.

Continue reading