https://maxread.substack.com/p/whats-the-deal-with-all-those-weird

People will plug in random usb.

Robin Sage https://en.wikipedia.org/wiki/Robin_Sage

Types of social engineers/insider threats:

  • insider associates
  • insider affiliates
  • outsider affiliates

Scammers

pig butchering, romance scam, involves gaining trust advanced tactics include mock group chats

FBI says in 2022, Americans lost $22 billion to this scam (and others like this)

“On a basic level, responding to a spam text confirms your number is active and engaged.” https://lifehacker.com/your-joke-texts-with-scammers-will-backfire-1849178959

Human Based Attacks

  • Impersonation
  • Technical Support
  • Shoulder Surfing
  • Tailgating/Piggybacking

Pretexting

Quid Pro Quo

Vishing

Computer Based Attacks

  • Phishing email scam
  • Whaling targeting CEO for example
  • Pharming (evil twin website)

Phishing

FTC warns about QR code scam (such as those seen on parking meters in Texas)

a recent social engineering campaign in 2023 has targeted high profile facebook pages, hijacking them to distribute spam page administrators were lured by phishing schemes over zoom which lead them to surrender their page access unknowingly

reply chain attack