Focuses on recognizing and countering manipulation tactics that attackers use to exploit human trust. Covers pretexting, baiting, tailgating, impersonation scams, and organizational defenses such as verification protocols, awareness campaigns, and incident reporting procedures.
posts
One Click Cost MGM Resorts $100 Million In September 2023, a threat actor called Scattered Spider social-engineered an MGM Resorts employee through a simple phone call to the IT help desk. That single conversation — not a sophisticated zero-day exploit, not a nation-state attack — led to a ransomware incident that shut
In 2024, MGM Resorts lost an estimated $100 million after an attacker social-engineered an IT help desk employee with a ten-minute phone call. The attacker found a worker's name on LinkedIn, called the help desk, and convinced them to reset credentials. That's it. No zero-day exploit.
In January 2024, a massive dataset called "Naz.API" surfaced on dark web forums containing over 70 million unique email addresses and their associated passwords. Many of these credentials were still active. The breach wasn't the result of one sophisticated attack — it was an aggregation of
In 2024, the FBI's Internet Crime Complaint Center (IC3) reported that compromised credentials were a factor in a staggering number of the complaints they received, driving billions of dollars in losses. I've personally worked incident response cases where a single set of stolen credentials — purchased on
The $11 Billion Problem You're Probably Ignoring In 2023, the FBI's IC3 received over 21,000 complaints related to business email compromise alone — a category deeply intertwined with account takeover attacks — with adjusted losses exceeding $2.9 billion. That number keeps climbing. And those are just
The Coffee Shop Breach That Cost $6.5 Million In 2024, a mid-size financial services firm discovered that a single remote employee working from a hotel lobby had their session token hijacked through a man-in-the-middle attack on the hotel's Wi-Fi. The threat actor used that access to move
In March 2024, a single compromised employee credential at Change Healthcare led to a ransomware attack that disrupted pharmacy operations across the United States for weeks. The attackers didn't kick down a digital door — they logged in. That's what account takeover looks like in practice, and
The Breach That Cost a 12-Person Company Everything In 2023, a small accounting firm in Sacramento lost access to every client file it had. A single employee clicked a link in a fake DocuSign email. Within four hours, ransomware had encrypted the entire network. The ransom demand was $250,000.
In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered a help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They exploited a gap in employee policy — specifically, the identity verification process for password resets. A strong cybersecurity
A Single Stolen Password Cost One Company $60 Million In 2023, MGM Resorts got hit by a social engineering attack that started with a single phone call to the help desk. The threat actors impersonated an employee, reset credentials, and within hours had enough access to deploy ransomware across the
