INSIDE THE MIND OF AN ATTACKER

Social engineering is king. Email is the primary delivery vector. It’s easier to find someone who will click than to find an exploit for an operating system. The attacker simply needs to know who has access to the data they want, then get creative. The org chart is the new zero-day—and today it’s publicly available on social media. Most security teams don’t have the same perspective that the threat actors do—they think of their attack surface in terms of VLAN and IP address, instead of department, or job title. By enriching email threat data, from multiple organizations, with names, job titles and functions; we will paint a picture of the current threat landscape and bridge the gap between what the attacker targets, and what the security team assumes they must defend.