[S@Msepiol]

Let's share some some new and good Social engineering tactics for various types of attacks.

Let me give you one for Facebook hack.

How to hack Facebook with social engineering?
you need to have:
1. victims phone number
2. Email or username

enter the username or email of the victim you want to hack

click on forgot password

then click on send me a verification code

now just go a to website called textfree.us to send free text messages

and forge a message so that victim end up giving you the Verification code

something like " Some suspicious activity is recorded on your Facebook account please verify your account by replying this essage with the Verification code sent to you (note - do not copy paste the whole message). Not replying with the code can deactivate your account"

and if you have victims email address
then send a forged email address which supports the message you just given
something like " Suspicious activity recorded on your Facebook account respond with the message we send to your connected mobile number" and obviously make a fake email address for this name email something similar to facebbok with a typo error
like fceabook or @dminFaecbook

that's one way to phish the verification code

Let's discuss some more social engineering tactics..........feel free to point out any fault in the above tactic.

[Void]

That’s pretty simple way that might work out. I do believe most people are smart enough not to fall for these fake messages nowadays though. Good share though!

[Geppetto]

Let's share some some new and good Social engineering tactics for various types of attacks.

Let me give you one for Facebook hack.

How to hack Facebook with social engineering?
you need to have:
1. victims phone number
2. Email or username

enter the username or email of the victim you want to hack

click on forgot password

then click on send me a verification code

now just go a to website called textfree.us to send free text messages

and forge a message so that victim end up giving you the Verification code

something like " Some suspicious activity is recorded on your Facebook account please verify your account by replying this essage with the Verification code sent to you (note - do not copy paste the whole message). Not replying with the code can deactivate your account"

and if you have victims email address
then send a forged email address which supports the message you just given
something like " Suspicious activity recorded on your Facebook account respond with the message we send to your connected mobile number" and obviously make a fake email address for this name email something similar to facebbok with a typoerror
like fceabook or @dminFaecbook

that's one way to phish the verification code

Let's discuss some more social engineering tactics..........feel free to point out any fault in the above tactic.

Yes this may not work these days but it used to people are getting smarter good post thought

[S@Msepiol]

Let's take an another tactics
Social engineering is based on some human emotions
Like we can use curiosity or fear or something like that that will tell a victim to fall for the phishing bait or whatever we want them to do

Let me take an example of how to use fear for this .

If i just craft a message with a totally private number which do not connect to me and send it to victim
The message goes like
"I just hacked you instagram or lets say gmail account password and change all the information so that you dont get notification if you dont think i am telling truth try by log in with this link and check if you can login" now add some more fear so that victim falls for the trap...

I believe that most of the people who are new to cybersecurity or hacking or dont know a shit about it will definitely fall for this

[kirmacoea]

There is some spoof call apps which can make call to anyone using any number.

I tested some of app using free credits, and just made miss call my friend, using his wife number.

Do imagine what you can do 😌

[Void]

There is some spoof call apps which can make call to anyone using any number.

I tested some of app using free credits, and just made miss call my friend, using his wife number.

Do imagine what you can do 😌

Was it spoofcard you used? I’ve always wanted to try that app but it has some pretty bad reviews.

[kirmacoea]

Was it spoofcard you used? I’ve always wanted to try that app but it has some pretty bad reviews.

There is several apps can find in app store, but i used free credits on it, its can buy credits if you need ( that’s actually app purpose)

When install app new, its give some free credits to check it. So I tested that way.

I have no idea how can spoof call id, may be there is better way to do it.

[S@Msepiol]

There is several apps can find in app store, but i used free credits on it, its can buy credits if you need ( that’s actually app purpose)

When install app new, its give some free credits to check it. So I tested that way.

I have no idea how can spoof call id, may be there is better way to do it.

I have also used some spoof call application some of them also come with voice changer.
But a good spoof call application is hard to find

[Warlock_wraith_07]

I have also used some spoof call application some of them also come with voice changer.
But a good spoof call application is hard to find

Well I can teach you though, how to spoof calls easily without credit 🙂

[SIM-4574945]

I always reccomedend this trick, because it brings much results than other techniques like "password harvesting attack". Anyhow, the text of the message looks good, but another sample would be more appropriate. Your test is a bit long.

I would write: "There's been a suspicious activity on your Facebook account. Please verify your account by replying this message with the verification code sent to your mobile device"

Or: "There's been a suspicious activity on your Facebook account. Please respond with your verification code to help secure your account"

I don't suggest using a voip number, but a real one. Feel free to answer me if you need further tips about.

[S@Msepiol]

Well I can teach you though, how to spoof calls easily without credit 🙂

Tell us