Socialengineering
The attack surface training cannot patch. Vishing, SIM swaps and pretexting that took down casinos, Twitter and Okta with a phone call.
Case files on the human path in - how the call was framed, who it fooled, and what it cost.
The track log
what's on fileField reports
6 in this track // newest firstFrom Instagram OGs to $100M Heists: The Rise of the SIM Swapping Scene
It started with stealing Instagram handles. By 2020, the same community of teenagers had compromised Twitter's…
Open report →The Fappening: Anatomy of a Two-Year Celebrity Phishing Campaign
One man, working alone for almost two years, built a custom phishing kit that mirrored Apple and Google login pages,…
Open report →MGM vs Caesars: The $100M Casino Hack That Defined the Ransomware Debate
In September 2023, Scattered Spider compromised both MGM Resorts and Caesars Entertainment using help desk vishing…
Open report →The Twitter Hack: How a 17-Year-Old Took Over Obama, Biden, and Musk With One Phone Call
On July 15, 2020, a 17-year-old in Tampa, Florida used vishing to convince Twitter employees to hand over internal…
Open report →LAPSUS$: The Teenage Hackers Who Breached Microsoft, Nvidia, and Okta with a Phone and a Telegram Account
In three months, a group of teenagers compromised Microsoft, Nvidia, Samsung, Okta, T-Mobile, and Rockstar Games -…
Open report →Uber and Rockstar: An 18-Year-Old on Bail Breached Both Companies with a Fire TV Stick
In September 2022, Arion Kurtaj - LAPSUS$ member, 18 years old, on bail with conditions prohibiting internet access -…
Open report →Track console
shell // guest sessionTry help, random, latest, grep <term>, or count.