HACKERX SALESX HOW TO
HACKERX SALESX PASSWORD

The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category 'Functional'. The cookie is used to store the user consent for the cookies in the category 'Analytics'.

This cookie is set by GDPR Cookie Consent plugin. These cookies ensure basic functionalities and security features of the website, anonymously. Necessary cookies are absolutely essential for the website to function properly.

HACKERX SALESX PASSWORD

Make it personal – If your employee realizes that their work password is also their banking password and the implications therein, they will be more vigilant.

Having a manager that looks at forensic data can help keep lock down on weirdness going on in an account-level basis.

Look at Privileged Account Management solutions – Especially if you are an enterprise or have lots of varying account levels.

There are agencies who will put this in your pen-testing plan. If they are going to be clicked on, hopefully it is you who is orchestrating the attempt.

Train your employees on security awareness – including fake social phishing attempts.

However, until we finally get rid of passwords in their entirety, there are a couple of easy ways to help remedy this ever-growing issue Most of the people you will meet have good intentions, or do not even think in this way. I’m not suggesting we stop posting on social media or stop being friendly on first phone calls. To make matters worse, since Steve uses the same password for everything, Hugh starts jet-setting through his financial data. Just like that, social phishing has occurred. Then he sends an email asking to sign in to verify trip details. Hugh builds a quick landing page to look like Bass Pro. They get off the call and Hugh Hacker has all the info he needs. The actor finds out that Steve is a member of Bass Pro’s membership program and even has a trip coming up. The threat actor sees that Steve loves to fish, so he brings it up on the call – what types of fishing he usually does, where he likes to go, etc. Imagine he has an “interview” with someone who wants to join the team who is actually a threat actor. He manages around 25-30 reps and works round the clock to keep it going. Steve is a Director of Sales who runs the East Coast. Stevie is the ideal example of social phishing.

For example, let us look at Stevie Salesguy. Privileged accounts are not just admin creds, there are several people within the enterprise who have advanced levels of access. “That is great, but why do I care about how salespeople are getting more and more annoying?”īecause this is how you lose privileged account credentials.

HACKERX SALESX HOW TO

Social Engineering is often noted for being “innovative and creative.” Eventually, I found myself doing company-wide webinars effectively helping teach how to (legally) cyber-stalk people. What is known as good salesmanship actually is known by another name, and a not-so-nice one at that: Social Engineering. It does not always work, but it was definitely more successful than just leaving voicemails that were never returned. Find a couple of interesting things about a target, call into a couple of people and get an email address, utilize that info found previously to create rapport, get meeting. The best way to get around it was going to social media. This is double true when you are just 1 of 1000 entry-level sales reps who “just wants to pick your brain.” Getting those 3 net-new meetings a week became more and more difficult as the threat landscape (and thus the industry) has grown, and it is only going to get worse. As you all know, you have to find ways to stand to the customers. Starting in the sales industry, I was strictly business development. However, the true kicker is that social phishing is really easy to do, just by using basic sales techniques. You are probably thinking “why on earth is there ANOTHER article about social phishing? Have we not drained that pond by now?” This is a common line of thought, but unfortunately, phishing attacks (leading to credential theft) are still one of the main ways that hackers access your information.

Hackerx salesx