PHISHING | VISHING | PHYSICAL

SOCIAL ENGINEERING

Redbot Security provides real-world social engineering attacks , organized and deployed by our team of experts. Our services include physical and electronic social hacking.

Use the Quick Contact form below for Social Engineering Attacks -or- tell us more details about your upcoming project.

Phishing is a malicious actor’s attempt to illicit non-public information, divulge credentials, install malware, or gain access to internal networks through social manipulation of employees through email. Phishing attacks techniques are typically fall into one of two categories:

General Phishing Campaign: These types of engagements are blanketed among a larger pool of employees. In the wild, a malicious actor may launch a campaign against thousands of people from an email list without regard to an individual company.
Spear-Phishing Campaign: These types of engagement are specifically handcrafted to target an individual or small group of people. Spear-phishing campaigns can also attempt to establish relationships over a long period of time and groom the victim into an unknowing ally. (See more details below)

Physical Social Engineering

The steps for performing a physical, social engineering assessment also depend on whether the client is receiving its first physical assessment or is already in the process of honing its policies and procedures through regular assessments. (see more below)

Custom Scoping

Our expert team takes pride in developing the right scope for your project.

Timeline Delivery

Our service delivery is designed to exceed expectations, to ensure you meet your deadlines.

Case Study

OR

Contact us

Proof of Concept

Complete Proof of Concept to show manual testing efforts with detailed storyboard of findings.

Sr. Level Support

Our primary goal is to ensure that your network is secure. We go the extra mile, are engaged, and continuously strive to be your ongoing security partner.

Case Study

Client: Water Utility
Onsite Physical Social Engineering
Initial Test performed over three (3) days
Six (6) key findings with access to SCADA control room

Redbot Security performs expert onsite Physical Security Control Testing for many critical infrastructure clients

Physical SE

Redbot Security’s methodology to test a client’s physical security consists of multiple phases, including: data collection, reconnaissance, pretext creation, execution.

Phishing and Vishing

Phishing is a malicious actor’s attempt to illicit non-public information, divulge credentials, install malware, or gain access to internal networks through social manipulation of employees through email.

Vishing (with a ‘V’) is a malicious actor’s attempt to illicit non-public information, divulge credentials, install malware, or gain access to internal networks through social manipulation of employees through telephone calls or text messages

Considering that most phishing engagements are completed within a given window of time, Redbot Security approaches campaigns in a hybrid model by first obtaining OSINT and then manually constructing a general phishing campaign that is unique to Company. Some of the actions performed can include: