Fishing to Phishing: Environmental Analysis & Social Engineering
Wayne Crowder draws parallels between professional sport fishing and targeted phishing, illustrating how environmental recon yields high-yield social engineering.
Summary
The Parallels Between Angling and Phishing
Successful social engineering requires the same methodical patience, environmental reading, and customized bait selection as competitive sport fishing.
Reconnaissance and Environmental Reading
Wayne Crowder explains how harvesting corporate OSINT—such as org charts, current vendor contracts, and recent press releases—informs tailored attack pretexts.
Crafting High-Converting Phishing Lures
Crowder demonstrates designing convincing email payloads and landing pages that mimic internal IT portals and trusted suppliers.
Building Resilient Organizational Defenses
The presentation emphasizes continuous interactive training, simulated phishing assessments, and frictionless suspicious email reporting.
Related talks
Adversary Village·30 min
Sanne Maasakkers
Sanne Maasakkers analyzes real-world nation-state phishing strategies, comparing APT psychological pretexts with traditional red team social engineering.
Social Engineering Village·29 min
Ryan MacDougall
Practical OSINT techniques applicable to security careers and daily life—real investigation walkthroughs and personal case studies.
Social Engineering Village·28 min
Edward Miro
OSINT and social engineering via rideshare interactions—gathering intelligence and testing security through Uber and Lyft engagements.