d_null
d_null
d_null d_null March 11 Mar 11 #19
what is most common mistake from new people?
wr4ith
wr4ith
wr4ith wr4ith March 11 Mar 11 #20
impatience. they get access or contact and immediately try extract. target is not stupid - just not expecting. give time and they give you everything.
m_0ssen
m_0ssen
m_0ssen m_0ssen March 11 Mar 11 #21
also using same pretext for too long. i see people stick with one story for month and then wonder why target get suspicious. rotate.
p_rail
p_rail
p_rail p_rail March 13 Mar 13 #22
anyone try going thru family instead of target direct? worth the extra exposure?
wr4ith
wr4ith
wr4ith wr4ith March 14 Mar 14 #23
yes done it. work when target is too locked for direct contact. current op i have family number as fallback - pacific northwest contacts. if target stonewall i go that route. but caller must be solid, no mistake on this play.
r3vik
r3vik
r3vik r3vik March 14 Mar 14 #24
family angle is risky but i understand why. target protect himself but family is usually not careful at all
gr4vl
gr4vl
gr4vl gr4vl March 14 Mar 14 #25
how you find family contact? just social media or something else
m_0ssen
m_0ssen
m_0ssen m_0ssen March 14 Mar 14 #26
facebook is still goldmine for this. family member post everything. also obituary, wedding announcement, local news
t_orca
t_orca
t_orca t_orca March 15 Mar 15 #27
DM sent. available for call, american accent, done bank pretext before.
wr4ith
wr4ith
wr4ith wr4ith March 15 Mar 15 #28
seen it. will follow up.
d_null
d_null
d_null d_null March 16 Mar 16 #29
wr4ith you mention mixed results before. what make a target not work out even when you have good profile?
wr4ith
wr4ith
wr4ith wr4ith March 17 Mar 17 #30
few reason. some target have good IT behind them and you dont know until you already in. some just have instinct and go cold for no clear reason. and sometime the payout is not worth the time invested. had one last year, CFO at midsize bank on east coast, three month of work and the account was frozen before i could move anything. you learn to qualify target early.
vl_enn
vl_enn
vl_enn vl_enn March 17 Mar 17 #31
three month and frozen lol. i feel this. qualification is everything
hndz_99
hndz_99
hndz_99 hndz_99 March 18 Mar 18 #32
second update: two week in with recruiter pretext. target ask me to send offer letter. i think i move too fast maybe?
r3vik
r3vik
r3vik r3vik March 18 Mar 18 #33
offer letter is easy to fake. just find template online and modify. dont panic
p_rail
p_rail
p_rail p_rail March 19 Mar 19 #34
anyone have opinion on spearphish vs full social eng? i wonder if phish is faster even if less control
silt_m
silt_m
silt_m silt_m March 19 Mar 19 #35
phish is faster but burn target if they catch it. social eng take longer but if it work target dont even know they been hit for long time
gr4vl
gr4vl
gr4vl gr4vl March 20 Mar 20 #36
this thread is actually useful. most megathread on here is garbage
wr4ith
wr4ith
wr4ith wr4ith March 21 Mar 21 #37
still looking for caller. pacific northwest region, finance target, family contact likely needed. pay is cut of payout, not flat fee. serious only.
DJDT

Versions

Time

Settings from devproject.settings

Headers

Request

SQL queries from 1 connection

Misago User Permissions

Misago User ACL

Static files (349 found, 0 used)

Templates (66 rendered)

Cache calls from 1 backend

Signals