We do not have the exact details about how this social engineering attack went down. Most likely, the attackers had done their homework and done some excellent surveillance and OSINT gathering. Perhaps it is an idea to use https://www.trustedsec.com/tools/the-social-engineer-toolkit-set/ Dave Kennedy is an expert on social engineering; there some really good podcasts out there. You might want to contact him for training stuff. <https://hackablepodcast.com/>https://hackablepodcast.com/ Dave Kennedy does some real cool stuff on this podcast. https://www.social-engineer.org/category/podcast/ with Chris Hadnagy, that guy knows his stuff for sure. Also, recommend to listen, https://darknetdiaries.com/episode/76/ I always wondered back in 2012-2014 who registered all those casino domain names. This episode explains it all ;) Best, Theo On Mon, Nov 23, 2020, at 8:33 PM, Judith Hellerstein wrote:
HI Jonathan,
Exactly my thought as well. We all could use this training. People click on links in the email and that is a real no go.I continually get emails that ask me to click on them and I never do
Best,
Judith
_________________________________________________________________________ Judith Hellerstein, Founder & CEO Hellerstein & Associates 3001 Veazey Terrace NW, Washington DC 20008 Phone: (202) 362-5139 Skype ID: judithhellerstein Mobile/Whats app: +1202-333-6517 E-mail: Judith@jhellerstein.com Website: www.jhellerstein.com Linked In: www.linkedin.com/in/jhellerstein/ Opening Telecom & Technology Opportunities Worldwide
On 11/23/2020 2:05 PM, Jonathan Zuck wrote:
So perhaps GoDaddy empolyees would benefit from the individual user education we are planning…
*From: *At-Large <at-large-bounces@atlarge-lists.icann.org> on behalf of Dev Anand Teelucksingh <devtee@gmail.com> *Date: *Monday, November 23, 2020 at 10:43 AM *To: *At-Large Worldwide <at-large@atlarge-lists.icann.org> *Subject: *[At-Large] Krebs on Security : GoDaddy Employees Used in Attacks on Multiple Cryptocurrency Services
Fraudsters redirected email and web traffic destined for several cryptocurrency trading platforms over the past week. The attacks were facilitated by scams targeting employees at *GoDaddy*, the world’s largest domain name registrar, KrebsOnSecurity has learned.
https://krebsonsecurity.com/2020/11/godaddy-employees-used-in-attacks-on-mul...
_______________________________________________
At-Large mailing list
At-Large@atlarge-lists.icann.org https://atlarge-lists.icann.org/mailman/listinfo/at-large
At-Large Official Site: http://atlarge.icann.org _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.
_______________________________________________ At-Large mailing list At-Large@atlarge-lists.icann.org https://atlarge-lists.icann.org/mailman/listinfo/at-large
At-Large Official Site: http://atlarge.icann.org _______________________________________________ By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (https://www.icann.org/privacy/policy) and the website Terms of Service (https://www.icann.org/privacy/tos). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.