social engineering the ceo
TRANSCRIPT
Social Engineeringthe CEO
Recoveryfrom Cyber Attack
October 2016www.linkedin.com/company/cyber-rescue-alliance
First presented in Oct 2016. For other presentations at this eventwww.linkedin.com/company/cyber-rescue-alliance
How CEOs open doors to cyber attackHolly Williams13 Oct 2016
I’m a hacker.
I break in to computersand buildings for a living
Attackers can abuseopen source intelligence
effectively gatheringInformation about targets
online
People make it super easy
Now I’m not saying that you need to abandon all social media.
I personally use social media more heavily than anyone here (trust me!)
LinkedIn can help too
Some scams are obvious
Some scams aren’t
50% of users
will hit the link
33%of users will submit
credentials
Please confirm your account details below:
Password reuse makesThings so much worse!
Your account has been locked!
Register for the event!
Attending IPExpo?
Can we arrange a meeting?
But why a meeting?
Meetings allow for semi-legitimate access to a building…
But why a meeting?
So we can get passwords…
What else can we get?
Information Gathering
Can we go any further?
Information Gathering
Full NameDate of BirthSpouse’s NameChildren’s Names
Phone NumberAddress
Information Gathering
Mobile Device Data Leak
Auto Probe Group
Bespoke Commercial Response Plan
Commercial Coach for Cyber Attack Response
Cyber Rescue Alliance
Practice your Response in Executive Simulations
Example Alliance Partners
Security Scorecard to auto review Suppliers
Cost effective onlineStaff Training
SEC-1 to conduct penetration testing
Join Cyber RescueCyber Rescue is a Membership organisation that helps CEOs lead recovery from cyber attack.
Cyber Rescue operates in 9 countries across Europe, helping leaders protect reputation and revenues when hackers break through. Membership costs £10,000 per year.
Members benefit from Executive Role Plays, bespoke Commercial Response Plans, and expert Coaching during a catastrophic breach. Cyber Rescue's advisors have led response to thousands of cyber attacks and hundreds of breaches. The Cyber Rescue team have expertise the many functional areas that are impacted by a successful cyber attack, for example Legal, PR, HR, Operations, Finance and Customer Service, as well as IT Forensics and Remediation.
+44 (0)20 7859 4320www.linkedin.com/company/cyber-rescue-alliance