845: Robert Kerbeck | From Struggling Actor to Corporate Spy

Techniques

Jordan Harbinger and Robert Kerbeck discuss the power of social engineering, emphasizing the human element as the weakest link in security systems. Jordan shares his experience from Defcon, highlighting how easily people can be manipulated to divulge sensitive information despite advanced security measures 1. Robert adds that technical hacking skills are often unnecessary when one can effectively "hack people" 1. Jordan also recounts his own tactics, such as using caller ID spoofing and creating a sense of urgency to bypass security protocols 2.

   

High Stakes

High-stakes scenarios often involve creating a sense of urgency to exploit human vulnerabilities. Jordan and Robert discuss how ransomware attacks can be used to manipulate employees into revealing critical information by playing on their fears and the urgency of the situation 3. Robert shares an anecdote about a scam that almost succeeded because the victim was kept on the phone, preventing them from thinking critically 4. These stories illustrate the effectiveness of urgency in social engineering tactics.

   

Psychology

Understanding the psychological elements of social engineering is crucial for both attackers and defenders. Robert points out that corporations often neglect training employees on social engineering, focusing instead on technical defenses 5. He explains that identifying and addressing objections is key to successful social engineering, as it helps in overcoming resistance and gaining trust 6. This psychological manipulation is often more effective than technical hacking.