Instructor: Okay, now let's see how we can build up 2 2
an attack strategy against our target, 3 3
which is Zaid, a person named Zaid. 4 4
Before I do any of that, 5 5
I just wanna just do this in front of you, 6 6
just organize my workspace, so that we can think 7 7
of it properly and come up with ideas. 8 8
So I'm gonna delete all of these websites because 9 9
they didn't really contain any useful information. 10 10
So I'm just gonna keep, the only one 11 11
that had useful information was Udemy 12 12
and that's the only one that I'm gonna keep. 13 13
And I'm gonna move this here 14 14
and I'm gonna put Zaid here on the top. 15 15
And I'm just gonna click 16 16
and drag from here to the email address, 17 17
so that we'll know that this, 18 18
that Zaid, is associated with the email address. 19 19
And I'm just gonna click okay 20 20
and you can see now Zaid is associated with this email, 21 21
which led us to isecurity. 22 22
And then, we're actually gonna just add 23 23
another arrow from Zaid to my Twitter account, 24 24
and again, so that just we know that this Twitter account 25 25
is associated with this person. 26 26
And we have an entity here of Udemy. 27 27
We also know that Muhammad Askar right here has this email, 28 28
so it has m.askar@isecurity.org. 29 29
So we know that this person, 30 30
this email is associated with this person. 31 31
And the email is @isecurity.org, 32 32
then this person is probably or most definitely 33 33
is associated with isecurity.org as well. 34 34
And if you actually do a Google search, 35 35
you'll see that this guy is the admin of isecurity. 36 36
So again, we're just gonna put an arrow from here to here 37 37
and I'm gonna do the same with Mustafa 38 38
because you can see we have his email there. 39 39
And we'll also associate isecurity with this person. 40 40
And I'll just move him here and move this guy there. 41 41
And then, over here, I know I made a mess out of this, 42 42
but it's much easier when it looks clean. 43 43
Okay, this is much better. 44 44
Now, let's zoom in a little bit. 45 45
Okay, perfect, so our target is Zaid 46 46
and we know Zaid uses Udemy and teaches courses there. 47 47
We're also able to see Zaid's blog, 48 48
we're able to see his YouTube, LinkedIn, 49 49
and all that stuff already. 50 50
Now, that on it's own can make me think 51 51
of so many ways to attack Zaid. 52 52
We can, looking at how active he is on Udemy, 53 53
we can just pretend to be a person from Udemy, 54 54
so we can pretend to be someone from the admins of Udemy 55 55
and send him a program, for example, 56 56
and tell him this is our new beta program 57 57
that we're only giving to special instructors. 58 58
This way, Zaid will feel privileged 59 59
because he's getting something 60 60
that other instructors are not getting 61 61
and he'll run that file. 62 62
And once he runs that file, that file is gonna be a Trojan, 63 63
so that file can be a backdoor or a keylogger 64 64
or program that will steal his passwords or allow us 65 65
to do anything we want on the target computer. 66 66
Now, again, like I've said in this section, 67 67
we're not gonna be talking about the technical stuff. 68 68
We'll talk about that in future lectures 69 69
and you'll know how to do this, 70 70
so when I say we'll send him a file that looks like 71 71
a normal file, we'll actually be able to do that. 72 72
And this normal file, it'll be a normal program, 73 73
but at the background, it'll do what we want it to do. 74 74
We can also pretend to be from YouTube, 75 75
from the blog, from WordPress, from Udemy again, 76 76
and ask him to reset their password. 77 77
And give them a link that has a login page 78 78
exactly the same as the login page of Udemy or YouTube, 79 79
And once they put on their password, 80 80
we'll actually get that password. 81 81
So the possibilities are endless there 82 82
and we'll talk about ideas on how to all of that later on. 83 83
Looking at the connections that we can see here 84 84
with isecurity, we can see that this person 85 85
has a lot of connections with this company 86 86
or with this website. 87 87
We can see that he has an email at isecurity.org. 88 88
So again, this email is really useful because 89 89
this is how we're gonna be communicating with Zaid. 90 90
You can also communicate with him through Udemy, 91 91
obviously, as sent as messages, 92 92
but I'm pretty sure that his friends 93 93
and yes, my friends don't really 94 94
communicate with me over Udemy. 95 95
So if you want to target Zaid using his email, 96 96
that's another way to do it. 97 97
And we have his friends, so we have 98 98
one of his friends right here, Mohammad. 99 99
And you can see there's so many connections 100 100
between him and Zaid. 101 101
They're both friends on Twitter, 102 102
they're both active on isecurity, 103 103
and they both have @isecurity.org email, 104 104
so this makes you think they're not only work colleagues, 105 105
they're probably friends as well. 106 106
And exploiting this friendship, you can send stuff 107 107
to Zaid asking him about anything really. 108 108
You can show him pictures of a car 109 109
that you want to buy, for example. 110 110
You can send him PDFs because you know that both 111 111
of these guys are interested about computer security. 112 112
They're running a security website. 113 113
And you can just send him a PDF saying, 114 114
"Oh ,look at my new ebook." 115 115
And when they open the PDF, again, it'll run a file that 116 116
you want it to run on the system, that'll give you, 117 117
gain access on Zaid's system. 118 118
Now, again, when you send an email, 119 119
you'll be able to send an email that looks exactly 120 120
as if it's coming from Mohammad. 121 121
You can do the same to Mustafa, 122 122
so you can send stuff to Zaid. 123 123
You can send him stuff that they're interested in. 124 124
You can send him just pictures. 125 125
You can send him links to ask him to login and do something. 126 126
The possibilities, again, are endless 127 127
when it comes to social engineering. 128 128
Not only that, but let's say you tried everything 129 129
and you couldn't hack into Zaid's system. 130 130
You tried to pretend to be all of these people. 131 131
You tried all the ideas that you can think of 132 132
and you couldn't reach Zaid's system. 133 133
This is not the end of the world. 134 134
What you could do is you can actually 135 135
try to hack into one of his friends, 136 136
so you can try to hack into Mohammad's computer. 137 137
You can try to hack Mustafa's computer. 138 138
From there, try to get into their Facebook 139 139
and then, communicate with Zaid over Facebook 140 140
from their Facebook account because you can't really 141 141
send a message that looks like it's coming 142 142
from Mohammad on Facebook. 143 143
We can only do that with emails, 144 144
but again, you can hack into these guys Facebook's accounts 145 145
and then, try to hack into Zaid. 146 146
Why not hack into their accounts, hack into isecurity? 147 147
Because you know that these people are admins. 148 148
They have @isecurity emails. 149 149
And even if you research their names, 150 150
you'll see that they're admins. 151 151
Why not hack into their computers, hack into isecurity? 152 152
And Zaid definitely browses isecurity, 153 153
so embed a backdoor in there or change one of the files 154 154
that's hosted into isecurity into a backdoor, 155 155
and then, once Zaid downloads it or uses it, 156 156
you'll be able to hack into his computer. 157 157
Now, again, don't get overwhelmed about 158 158
all the information I'm saying at the moment. 159 159
We will take this step by step 160 160
and you'll learn how to send these fake emails, 161 161
how to create these back doors, 162 162
how to create these keyloggers, 163 163
and all that cool stuff in the next sections of this course. 164 164
For now, I just wanted to show you how powerful Maltego is 165 165
and how you can use it to gather information 166 166
about anything, really. 167 167
We started with just a name. 168 168
Literally, we started with Zaid Sabih 169 169
and we were able to gather information about his websites, 170 170
his blog, his YouTube, his friends, his emails, anything. 171 171
We literally profiled the whole person. 172 172
And again, this person is a techy person, 173 173
a person who is interested into information technology, 174 174
so he's very careful with what to share, 175 175
but we were still able to gather enough information 176 176
to build up an attack strategy. 177 177
If you do this against a normal person, 178 178
you'll be surprised about the amount of information 179 179
that you'll be able to gather about them.