Social Engineering by Amr Ali in First AlexGTUG Event

1. Human Mind Ownage!
Mind architecture and exploits.
Amr Ali
GTUG-Alex Launch 2011

2. What is Social Engineering?

4. There is no patch, but there are guards!

5. Perhaps an EXAMPLE?

6. Mary: "Personnel, this is Mary. How can I help you?"
Isreal: "Hi Mary, this is Mark in home office. How are you today?"
Mary: "Hi Mark, I'm doing great. We have a warm sunny day for a change so it's pretty nice. What's it like
down your way?"
Isreal: "Well, the weathers pretty good today, but things here in the office are not in good shape at all. I'm
gonna need your help for a few minutes."
Mary: "What's wrong?"
Isreal: "The guys that take care of the computers are saying that we got one of those viruses that tears up
your computer."
Mary: (sounding worried) "OH NO"
Isreal: "I don't really know much about computer viruses, but I do know that some of the words coming out
of that office would make a sailor blush." (I laughed and she joined in)
Mary: "That sounds awful. I don't know anything about viruses either, but I hear about them on the news all
the time. They sound terrible. So how can I help with it?"
Isreal: "Well from what the computer guys are telling me, the virus got in our personnel computers and
erased some of the information we had on company employees. They gave me a list of names, and I have
to call all these stores and get the information back in our computers. So I'm gonna need you to pull up a
Jackie McGeath's information and get ready to answer a few questions. OK?"
Mary: "Sure Mark, anything I can do to help. Is her information still gonna be in my computer or will I need
to get out her file?"
Isreal: "I don't have any idea, but just to be safe, you'd better go ahead and get her file to save some time.
I still have to call 146 other stores today so my time is a bit limited."
Mary: "OK, I'll put you on hold and hurry up and get the file. I'll be right back."

7. Research is KING!

9. B
B B
B
U
U U
U
S
S S
S
T
T T
T
E
E E
E
D
D D
D

10. Phreak you?

11. Research!
Authenticate!
Verify!
Ask?
Change status
quo!
Anticipate! Re-Ask?

12. Reverse Social Engineer?

13. Thanks!
Questions?