The Perfect Storm: How AI is Revolutionizing Social Engineering Attacks in 2025
The convergence of advanced AI with social engineering has created what I call the perfect storm – a transformation so profound that it’s rewriting the […]
Category: Social Engineering
Building a covert SMTP infrastructure
Introduction Phishing is a ray of light when every attempt to breach an organization fails. However, setting up a covert SMTP infrastructure for phishing is […]
Fundamentals Hacks Malware Analysis Penetration Testing Research Security Testing Social Engineering Tools
Malware Development – Welcome to the Dark Side: Part 1
If you are in cybersecurity, especially Red Teaming, writing a full-undetectable (FUD) malware is a great skill to have. Folks tend to use Metasploit combined […]
Getting System Access using Malicious Word File
[[Post was originally posted on 23rd May, 2017 at invadersam.com]] Microsoft Office Word / Wordpad remote code execution vulnerability allows a remote attacker to execute […]
Canary – An Open Source Decoy
Before we start to configure our decoys and put it in our production environment, let’s take a look at what exactly it is and how […]
Exfiltration Using Powershell & Outlook
Introduction When an attacker compromises an end-point system in an organization, he needs some sort of confirmation that: his code was executed on the targeted […]
Spear Phishing – Beware Of Your “Friend”
What is a Spear Phishing? Spear phishing is a deceptive communication technique in which a victim is lured via e-mail, text or tweet by an […]
SMiShing – On My (An)droid
Many times we receive SMS’s on our cell phones displaying messages like the one shown below: Typically a phone number to call or a website […]
Social Engineering & "Influence", by Dr. Cialdini
Over the past few years, we have completed a number of social engineering tests as part of advanced penetration testing at various organizations. Coincidentally, I […]