The Social-Engineer Podcast

Ep. 236 - The SE ETC Series - Vishing, Phishing and SMiShing...Oh My! - End of Year Threats

Nov 27, 2023

Topics discussed in the podcast include QR code attacks, holiday scams and fraud prevention, personal experiences with phishing attacks, phone scams and gift card fraud, and strategies to protect against social engineering attacks.

43:45

Creator website

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

During the holiday season, be cautious of smishing attacks (phishing attacks via SMS) which often involve messages about missed deliveries or payment problems.

Gift card scams are prevalent during the holiday season, where scammers impersonate someone known to the victim, manipulate emotions, and create a sense of urgency to trick individuals into purchasing gift cards and providing the codes.

Deep dives

Be cautious of smishing attacks, especially during the holidays

During the holiday season, smishing attacks (phishing attacks via SMS) become more prevalent. These attacks often involve messages about missed deliveries, customs fees, or problems with payments, enticing recipients to click on malicious links or provide sensitive information. Attackers take advantage of the increased online shopping and the use of mobile devices to target unsuspecting individuals. It's important to be extra cautious and verify any suspicious messages before taking any action. Be aware that legitimate organizations like banks or retailers will never request sensitive information or ask you to provide payment details via SMS. If in doubt, contact the organization directly using verified contact information to confirm the validity of the message.

Introduction

5min

Quishing: The Risks of QR Code Attacks

6min

Protecting Yourself from Holiday Scams and Fraudulent Transactions

2min

Phishing Attack Experience and Reflection

19min

Holiday Scams and Gift Card Fraud

9min

Protecting Against Social Engineering Attacks and Upcoming Story Time

3min

Welcome to the Social-Engineer Podcast: The SE Etc. Series. This series will be hosted by Chris Hadnagy, CEO of Social-Engineer LLC, and The Innocent Lives Foundation, as well as Social-Engineer.Org and The Institute for Social Engineering. Chris will be joined by his co-host Patrick Laverty as they discuss topics pertaining to the world of Social Engineering. [Nov 27, 2023]

00:00 - Intro

00:19 - Patrick Laverty Intro

00:50 - Intro Links

- Social-Engineer.com - http://www.social-engineer.com/

- Managed Voice Phishing - https://www.social-engineer.com/services/vishing-service/

- Managed Email Phishing - https://www.social-engineer.com/services/se-phishing-service/

- Adversarial Simulations - https://www.social-engineer.com/services/social-engineering-penetration-test/

- Social-Engineer channel on SLACK - https://social-engineering-hq.slack.com/ssb

- CLUTCH - http://www.pro-rock.com/

- innocentlivesfoundation.org - http://www.innocentlivesfoundation.org/

04:33 - Intro Chat: QRishing

10:25 - Todays Topic: End of year threats