i hacked my grandma (social engineering and pretexting) // FREE Security+ // EP 3
Source: YouTube · NetworkChuck · published Nov 10, 2020 · 16:13
The video demonstrates how easily social engineering attacks can work by testing family members with pretexting scenarios 0:23. The creator uses a Raspberry Pi with caller ID spoofing and voice modification to impersonate "Anita" from Lowe's when calling his wife 1:04 and State Farm when calling his grandmother 3:32. While both gave up their home addresses, they refused to provide credit card information 7:00.
Key Takeaways:
• Social engineering through pretexting involves creating a false story to gain information 0:23
• Identity theft is extremely common - 14 million Americans had their identity stolen in 2019 (1 in 15 people) 7:33
• Major data breaches from companies like Microsoft, MGM Resorts, and T-Mobile expose millions of personal records 8:42
• Check if your information has been compromised using sites like haveibeenpwned.com and change passwords regularly 10:22
• Physical security vulnerabilities like "tailgating" allow unauthorized people to enter buildings by following legitimate employees 13:33
The video emphasizes that everyone should assume their information could be compromised and stay vigilant against identity theft through monitoring services and security awareness 12:55.
Sources:
- 0:23 Introduction to pretexting attacks
- 1:04 Setting up the attack on the creator's wife
- 3:32(https://www.youtube.com/watch?v
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hello hi miss keith yeah this is anita from lowe's hi this is anita from state farm how are you today i'm good who is this anita from state farm oh hi there in this video i'm going to try and hack my wife and my grandmother and i'm really putting them to the test i want to see if they will fall for a classic social engineering attack the attack i'm using is called pre-texting which basically means i'm creating a story a fictitious story about who i am why i'm calling them and my goal is to get information from them how much information can i get my wife and my grandmother to give me about themselves let's find out and shout out to comptia for sponsoring this video if you want to learn more about what i'm doing here go deeper i got links below you can check out and also please please never …