Learn Social Engineering

Phishing/spear phishing

Phishing is an attempt to obtain sensitive information, such as usernames, passwords, and credit card details, often for malicious reasons, by disguising oneself as a trustworthy entity in an electronic communication. Even though most people are aware of this type of attack and they already know that they should not be opening emails or clicking links coming from untrusted sources, the fact is that, in most attacks, cyber criminals pretend to be someone you already know/trust. This is because, previous to the phishing attack, they gather intelligence about the target such as what he/she likes, with whom he/she communicates by email the most, and so on.

The following is one of my tests, in which I created a phishing ...