A short dramatized YouTube video (by Caitlin Sarian) that demonstrates a social-engineering attack: an attacker spoofs an internal phone number, calls tech support, sends a malicious link disguised as a troubleshooting prompt, and obtains remote access when the support agent clicks the link. The clip is a rapid proof-of-concept showing how easily tech support can be tricked into granting access.
Watch a hacker hack into a company in under two minutes.
Step one, spoof his number so it looks like he's calling from inside the company. And then call tech support.
Hello? You there? Hello?
Hi, this is Ken. How may I help you?
I was wondering if you can take a look at a website I'm trying to get to. It's for a big customer thing I'm working on for Monday and I can't seem to get to the website from my computer.
Sure. What's the website? I'll see if I can get to it.
Thanks, man. I really appreciate the help. I mean, it could be a stupid thing. I really suck with computers, but still. So it's www.survey. that's s u r v e y-pro.com.
Yeah, I got a prompt to open. I just clicked open and I'm at the site now.
Here's what the IT guy doesn't realize. By clicking that link, he's just given David full access to his computer.
Whoa. Okay, that's weird. I just hit it and it works. It seems like it's working fine now. Awesome. I don't know what you did, man, but I really appreciate the help.
Hey, no problem. That was easy. That was it.
We're on his computer right now.
You.
White House scraps a rule to block data brokers from selling your personal data
