Welcome Guest. | Log In | Register | Membership Benefits
Dark Reading's hacked-off Weblog

Topics:   Hacked Off

Security's Top 4 Social Engineers Of All Time

My team here at Secure Network was recently discussing who we considered the best social engineers of all time. My colleagues and I each made a list and defended our candidates based on the creativity, innovation, and the public impact they had made. Here are our final top four social engineers from number four to number one, and why we chose them.

May 26, 2010 | 04:14 PM | 

By Steve Stasiukonis
Dark Reading

My team here at Secure Network was recently discussing who we considered the best social engineers of all time. My colleagues and I each made a list and defended our candidates based on the creativity, innovation, and the public impact they had made. Here are our final top four social engineers from number four to number one, and why we chose them.#4. Frank William Abagnale, Jr.

During the 1960s and without the assistance of the Internet or other digital conveniences, Frank Abagnale made his mark as a social engineer. He portrayed himself as a variety of imposters and used techniques that would build confidence with his victims. Combining those talents with his forgery skills, he pulled off some of the most deceptive scams of all time - everything from impersonating a chief resident pediatrician at a hospital for almost a year to posing as an airline pilot to fly for free. While Abagnale used his knowledge and expertise for purposes of deceit, he later served his time and became a security consultant helping the FBI thwart similar crimes. His life was also depicted in the Stephan Spielberg film "Catch Me If You Can," with Tom Hanks, Christopher Walken, and Leonardo DeCaprio. His special traits and the fact that he inspired a feature film led us to rank him the fourth best social engineer of all time.

#3. Chris Nickerson, CEO of Lares Consulting

Chris Nickerson is a modern day pioneer in the world of information security and social engineering and is a force to be reckoned with. He is a master at leveraging the latest technologies, has an extensive knowledge of physical security, and the guts to attempt projects most security experts would hesitate to do. Some of Chris's most notable experiences were seen on a TruTV reality show in which he demonstrated the weaknesses of a high-profile jewelry store and a sports car dealership. Using social engineering techniques and leveraging technology vulnerabilities, he gained entry into each location, compromising sensitive information, and accessing pricey merchandise, including an exotic sports car. Unlike Abagnale, Nickerson is a legit professional, hired by firms to conduct social engineering exploits in order to measure their risk and security weaknesses.

#2. Kevin David Mitnick

Kevin David Mitnick is a well known name in the world of security. His past includes a variety of social engineering exploits and hacks that led to the security breach of numerous Fortune 500 companies, as well as federal and state agencies. His expertise dates as far back as 1975, learning the vulnerabilities of everything from punch card systems to telecommunications. Mitnick's actions ultimately landed him in jail, and he served prison time for crimes that tested new laws relating to digital theft. But his social engineering techniques and technical abilities broke new ground in launching the information security industry. He has since reinvented himself and founded Mitnick Security Consulting, LLC, co-authored two books, and is bringing information security awareness to the world. Mitnick's actions, as controversial as they may appear, earn him the second place slot on our list.

#1.

Our number one choice for best social engineer was unanimous among the group. At first glance, the choice may seem rather odd, but this distinction goes to a man who achieved the following: he crafted a web portal and lured millions of people into his pocket. He established confidence and trust with his users, facilitating them to divulge the secrets of their lives by relinquishing personal information, habits, behaviors, activities, and media. He collected all of this information and then sold it legally for millions of dollars, unlike others who served harsh prison terms. Incredibly, he accomplished this in a time when identity theft has become household issue and guarding your personal information has become a way of life.

In case you have you not guessed our number one social engineer, it's Mark Zuckerberg, founder and CEO of Facebook. Well done, Mark, 400 million people fell for your ruse.

Steve Stasiukonis is vice president and founder of Secure Network Technologies Inc.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS









  1. Cookies, Social Media And FireSheep
  2. SMB Guide To Credit Card Regulations, Part 2: The Low-Hanging Fruit
  3. HP And The Scary Corporate Fifth Column Concept
  4. Taking USB Attacks To The Next Level
  5. NoSQL: Not Much, Anyway
  1. Taking Cybersecurity Lessons To The Bank
  2. Researchers See Real-Time Phishing Jump
  3. 'BlackSheep' Sniffs Out Firesheep WiFi-Hacking
  4. Slideshow: Ten Free Security Monitoring Tools
  5. A Different Spin On Sleuthing Stuxnet
  6. M&A Activity Muddles Database Security
  1. Secure Managed Web Hosting Saves 960.gs from Malicious Hackers
  2. Access Governance as a Business Service: An Integrated Strategy for Automation with ITSM
  3. Business Driven Access Management and Governance: Simplifying the Delivery and Governance of Access Throughout
 
 


 
  Ars Technica
Boing Boing
Channel 9 Forums
CRN Blogs
Dr.Dobb's Portal: Blogs
Engadget
Gizmodo
GrokLaw
  Lifehacker
Schneier on Security
Slashdot
TechCrunch
Techdirt
Techmeme
Valleywag
 
  May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
  June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
 
Featured Webcasts
Featured Whitepapers
Featured Reports