In this technical talk organised by Pentest People, Josh Hickling will dive deep into the world of phishing, exploring the methods and strategies used by cybercriminals to target individuals and organisations, providing an insight into what it takes to run a successful phishing campaign.
Our journey will take us from the initial stages of open-source intelligence (OSINT) gathering to the post-compromise actions that follow a successful phishing attack.
Topics covered will include:
- OSINT: Learn what information attackers are looking for and the tools and processes they use to gather it;
- Target Identification: Understand how attackers dig for and select potential targets;
- Target Research: Explore the strategies used to research and profile targets;
- Attack Infrastructure: Discover the tactics used to select and prepare the attack infrastructure, including the use of JA4 and other baked-in defences;
- Phishing Attacks: Get acquainted with various types of phishing attacks and see examples of how they can be employed;
- Post-Compromise Actions: Gain insights into the steps attackers take after a successful breach, including where they go and what they do;
- Risk Management and Mitigation: Learn practical suggestions for managing the risk of phishing attacks and mitigating their impact.
By the end of the session, listeners will have a deeper understanding of how phishing attacks are conducted and what steps can be taken to protect against them in the context of a modern business.
Cyber professionals and those interested in pentesting/phishing techniques.
