Matthew’s Blog – Phishing and Footprinting

I mentioned that we went to meet a client in Elgin last week, they were interested in getting Vicky to do a free penetration test on their network. I assumed that the work she would do for this would just go over my head but I was glad to find something I was familiar with. Phishing emails. For those who aren’t familiar, it’s basically a scam email claiming that you’ve won money in a competition or some other kind of scenario but in reality, they have some kind of malicious intent. What we were going to do was a bit different than the generic “You’ve won £5000!”, we were going to do a targeted phishing email with our client from Elgin as the target.