An example presentation on how a social engineering attack can be launched using just OSINT tools for research on the target. This presentation shows how to craft a plan using the information gathered and launch a social engineering attack on the target.

1. About me –
Gautam Devaraju
@gautammd | India
CISE | Analyst
Social Engineering OSINT

2. Social Engineering -
What is it?
 In the context of information security, refers to psychological manipulation of people
into performing actions or divulging confidential information.

3. Target –
Information –
Name – Arinze Akutekwe
Nationality – Nigerian
Age – 33 (Not confirmed)
Occupation - Researcher in Computational Intelligence and
Biometrics at Centre for Computational Intelligence (CCI)
De Montfort University, Leicester.

4. These information are used to launch the attack and deploy a
backdoor for post exploitation.
Information Analysis
• Interested in Bioinformatics and Biomedicine.
• Attended Bioinformatics and Biomedicine (BIBM); 2nd to 5th November 2014 at Hilton
Belfast 4 Lanyon Place Belfast, BT1 3LP United Kingdom Tel. : +44-28-90277000 with Dr.
Huseyin Seker
• Presented on Particle Swarm Optimization-Based Bio-Network Discovery Method for the
Diagnosis of Colorectal Cancer with Huseyin seker.

5. Email Spoofing – E-mail spoofing is the forgery of an e-mail header so that the message
appears to have originated from someone or somewhere other than the actual source.
However, spoofing anyone other than yourself is illegal in some jurisdictions.
Methods used in this Attack

6.  Caller ID Spoofing – Caller ID spoofing is the practice of causing the telephone
network to indicate to the receiver of a call that the originator of the call is a station
other than the true originating station. For example, a Caller ID display might display
a phone number different from that of the telephone from which the call was placed.

7.  Identity Theft - Identity theft is a form of stealing someone's identity in which
someone pretends to be someone else by assuming that person's identity, usually as a
method to gain access to resources or obtain credit and other benefits in that person's
name.

8. Attack Scenario
Step 1 - Call Hilton Belfast Hotel on +44-28-90277000 and get name of the manager.
(It can be done either by saying that you would like to talk about the service and give some
appreciation about it or would like to complain about the service).

9. Step 2 - Spoof manager email and phone number using any caller id spoofing service.
Example - spoofcard.com, spooftel.com.

10. Step 3 - Call Dr. Huseyin Seker on +44 (0)116 207 8404 impersonating the identity of hotel manager.
Explain Dr. Huseyin Seker that Hilton Belfast is hosting another Workshop on Computational
Intelligence for Biomedicine and Bioinformatics (CIBB) and request if he could present on Particle Swarm
Optimization-Based Bio-Network Discovery Method for the Diagnosis of Colorectal Cancer with Arinze
Akutekwe.
In the end, ask him to inform Arinze Akutekwe that they would be receiving an email shortly
with all the information about the event. Add that, He can find more information about the event over
the website.

11. Step 4 - After couple of hours send a spoofed email with email headers to be manager email (made up
email should also work) which contains an attachment of pdf file binded to Trojan backdoor executable.
Step 5- Once the system is infected and a reverse meterpreter session is opened, migrate into another
process, clear the event logs and download all sensitive information.

12. Post – Exploitation Examples
 User Privilege Exploitation
 Dig more into network for internal access
 Keystrokes capture and dump

14. References
1. Caller ID spoof. (2015). [image] Available at: http://pad2.whstatic.com/images/thumb/c/cf/Use-A-
Spoof-Caller-ID-Step-1.jpg/670px-Use-A-Spoof-Caller-ID-Step-1.jpg [Accessed 12 Mar. 2015].
2. Caller Id spoofing. (2015). [image] Available at: http://media.idownloadblog.com/wp-
content/uploads/2011/08/Photo-Aug-21-11-50-18-AM-e1313946471782.png [Accessed 12 Mar.
2015].
3. Email Spoofing. (2015). [image] Available at: http://michellgroup.com/wp-
content/uploads/2014/02/email-spoofing.jpg [Accessed 12 Mar. 2015].
4. Identity Theft. (2015). [image] Available at:
http://www.cityofmadison.com/sites/default/files/events/images/identity-theft_full.gif [Accessed 12
Mar. 2015].
5. Metasploit Meterpreter. (2015). [image] Available at: http://myciscoworld.com/wp-
content/uploads/2013/03/metasploit-meterpreter1.png [Accessed 12 Mar. 2015].
6. Social Engineer Call. (2015). [image] Available at: http://blog.malwarebytes.org/wp-
content/uploads/2013/06/photodune-3396562-calling-m.jpg [Accessed 12 Mar. 2015].
7. Any Questions. (2015). [image] Available at:
http://i1275.photobucket.com/albums/y446/porschalink/Jasmine%20Porsche%20Centre/AnyQuestio
ns_zps6309316a.jpg [Accessed 12 Mar. 2015].