ICO wiki - User contributions [en]

ICS0018 Hands-on seminars

2025-02-16T21:32:48Z

Miriam: /* The Seminars */

=== The idea ===

The hands-on seminars are a task for '''teams of three''' (initially based on Kristjan Karmo's ScamLab materials). The goal is to learn about different scams in a safe(ish) but real environment. A little side quest is to waste scammers' time so that they can't use it on actual victims.
A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, '''please team up and register below''', in your chosen time slot. '''There are limited presentation slots - first come, first served!''' (note: as people sign up, we will probably have to cram as many presentations as possible into each seminar - but the space is not infinite, we will have more or less 90 minutes for each).

Note: this time, we went from paired work to 3-person teams due to the number of people in the course (the seminar time would not have been enough for pairs).

=== The Task ===

Step 1: Create a fake identity and honeypot email account for engaging with scammers. Other platforms are also welcome, as long as you are able to protect your identity.

Step 2: Distribute the email address on shady or spammy sites, such as social media, online forums, etc. Some tips can be found here https://www.quora.com/How-can-I-get-scam-emails

Step 3: Wait for the scams to start rolling in.

Step 4: Engage! First select if you're going to use a naïve or aggressive approach.

If you don't manage to get any scammers to directly email your newly created address, go look in your regular mailbox, in the spam folder, ask friends & family, etc. NB! Before replying to any of those "crowdsourced" scam emails from your fake account, be sure to delete the address it was originally sent to.

Some tips for safety:
# Never reveal your (or anyone else's) real personal information to the scammers. Make up something realistic.
# Never open any links in emails unless you're in a protected sandbox environment.
# NEVER give out any real financial information, account information, or passwords.
# Always use Multi-Factor Authentication (MFA). Even on your fake accounts.

Here's the grand prize: if you manage to engage with at least 3 scammers for an email chain of 5 messages or more (they respond to at least 2 of your letters in the same thread), and present your findings at one of the seminars, '''you pass the course'''. It's not as easy as it might first seem.

An alternative way to pass is to educate people in your social network, friends, family, coworkers, etc about scams, how to spot them, how to avoid them, what to do if you're already a victim. If you want to use this option, please contact Kaido (over e-mail or MS Teams) and suggest how would you do it.

=== The Seminars ===

The hands-on seminars will have the following schedule:
* Thursday, March 6 at noon (12:00)
** Stiven Lille, Innar Viinamäe, Georg Lee
** Liam Ivanko Kivirist, Pavlo Kolesov, Julian Gressmann
** Vusal Sayadov, Jeyhun Mustafayev, Salim Akbarov
** Ksawery Nowina-Witkowski, Niko Chinikadze, Ionut-Cristian Sindile
** Mark-Henry Jakobsoo, Madis Randmäe, Eliina Gorobets
* Thursday, March 13 at noon (12:00)
** Valerija Kuzina, Vassili Korobov, Andrei Timoshin
** ...
** Nikita Šabunin, Artem Skurchynskyi, Maksim Balašov
** ...
** ...
* Thursday, March 20 at noon (12:00)
** Kaspar Sibul, Matīss Ceriņš, Liyanage Don Sithil Insara Liyanage
** Marat Biryukov, Maria Aleksandra Ploduhhina, Kirill Ševtsov
** David Ayson, Angelica Daisi Stewart, Tekla Berozashvili
** Rassell Muru, Ivan Kuznetsov, Andrei Šutkov
** Tanel Maasik, Gabriel Jääger, Eric Richard Kogerman
* Thursday, March 27 at noon (12:00)
** Deniss Pavlov, Diana Anastassija Turks, Pavel Shemetov
** Dulan Damien Candauda Arachchiege,
** ...
** ...
** ...

[[Social Engineering | Back to the course page]]

ICS0018 CotW seminars

2025-02-05T09:47:04Z

Miriam:

=== The idea ===

The Crook of the Week seminars are meant for student presentations/talks about famous social engineers of the past. Each seminar will host up to
'''four 15-minute presentations''' by different students, plus discussion. The main points of the presentation are
* to introduce the person (biography)
* to explain the motivation behind his/her actions
* to study the ''modus operandi'' (ways) of social engineering by this person
* to outline the main human weaknesses the person exploited (cognitive biases, automatic thinking etc)
* to summarize the main lesson the person teaches us

A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, please send an e-mail to Kaido, stating the chosen time and person to cover. '''There are only 16 presentations in total - first come, first served!''' Others would have to resort to other tasks to pass the course!

=== The Crooks ===

Note: the list is not exhaustive - feel free to suggest others!

* Carlo Ponzi
* Victor Lustig
* Frank Abagnale Jr
* Mark Abene (Phiber Optik)
* Kevin Mitnick
* Susan Headley (Suzy Thunder)
* Kevin Poulsen (Dark Dante)
* Bernie Madoff
* Elizabeth Holmes
* Sam Bankman-Fried
* Mythical and literary characters: Jacob (Old Testament), Odysseus, Iago, Grima Wormtongue...
* BYOC (''Bring Your Own Crook''): introduce a well-known crook from your home country (as we are a very international bunch)!

=== The Seminars ===

The CotW seminars will have the following schedule:
* Tuesday, March 4, at 10:00:
** Alexandar Ivov Nikolov - Kevin Mitnick
** Aleš Sršeň - Frank Abagnale Jr
** Felix Mengele - Bernie Madoff
** Tom Konstantin Ege - Jan Marsalek (BYOC Suggestion)
* Tuesday, March 11, at 10:00:
** Najaf Alkhazov - Matthew Weigman
** Theodor Degen - Sam Bankman-Fried
** Jakub Fleislébr - Elizabeth Holmes
** Timo Uustal - Victor Lustig
* Tuesday, March 18, at 10:00:
** Deborah Allan Chapkovski - Mark Abene (Phiber Optik)
** Thomas Dourgarian - Kevin Poulsen
** Tristan Andersen - Stein Bagger (BYOC)
** Miriam Popič - Grima Wormtongue
* Tuesday, March 25, at 10:00:
** Jan Polách - Viktor Kožený (BYOC Suggestion)
** Mattia Roveri - Niccolò Machiavelli
** Max Renner - Susan Headley
** Simon Jäschke Carlo Ponzi

[[Social Engineering | Back to the course page]]

ICS0018 CotW seminars

2025-02-05T09:45:08Z

Miriam:

=== The idea ===

The Crook of the Week seminars are meant for student presentations/talks about famous social engineers of the past. Each seminar will host up to
'''four 15-minute presentations''' by different students, plus discussion. The main points of the presentation are
* to introduce the person (biography)
* to explain the motivation behind his/her actions
* to study the ''modus operandi'' (ways) of social engineering by this person
* to outline the main human weaknesses the person exploited (cognitive biases, automatic thinking etc)
* to summarize the main lesson the person teaches us

A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, please send an e-mail to Kaido, stating the chosen time and person to cover. '''There are only 16 presentations in total - first come, first served!''' Others would have to resort to other tasks to pass the course!

=== The Crooks ===

Note: the list is not exhaustive - feel free to suggest others!

* Carlo Ponzi
* Victor Lustig
* Frank Abagnale Jr
* Mark Abene (Phiber Optik)
* Kevin Mitnick
* Susan Headley (Suzy Thunder)
* Kevin Poulsen (Dark Dante)
* Bernie Madoff
* Elizabeth Holmes
* Sam Bankman-Fried
* Mythical and literary characters: Jacob (Old Testament), Odysseus, Iago, Grima Wormtongue...
* BYOC (''Bring Your Own Crook''): introduce a well-known crook from your home country (as we are a very international bunch)!

=== The Seminars ===

The CotW seminars will have the following schedule:
* Tuesday, March 4, at 10:00:
** Alexandar Ivov Nikolov - Kevin Mitnick
** Aleš Sršeň - Frank Abagnale Jr
** Felix Mengele - Bernie Madoff
** Tom Konstantin Ege - Jan Marsalek (BYOC Suggestion)
* Tuesday, March 11, at 10:00:
** Najaf Alkhazov - Matthew Weigman
** Theodor Degen - Sam Bankman-Fried
** Jakub Fleislébr - Elizabeth Holmes
** Timo Uustal - Victor Lustig
* Tuesday, March 18, at 10:00:
** Deborah Allan Chapkovski - Mark Abene (Phiber Optik)
** Thomas Dourgarian - Kevin Poulsen
** Tristan Andersen - Stein Bagger (BYOC)
**
* Tuesday, March 25, at 10:00:
** Jan Polách - Viktor Kožený (BYOC Suggestion)
** Mattia Roveri - Niccolò Machiavelli
** Max Renner - Susan Headley
** Simon Jäschke Carlo Ponzi

[[Social Engineering | Back to the course page]]

ICS0018 CotW seminars

2025-02-05T09:44:44Z

Miriam:

=== The idea ===

The Crook of the Week seminars are meant for student presentations/talks about famous social engineers of the past. Each seminar will host up to
'''four 15-minute presentations''' by different students, plus discussion. The main points of the presentation are
* to introduce the person (biography)
* to explain the motivation behind his/her actions
* to study the ''modus operandi'' (ways) of social engineering by this person
* to outline the main human weaknesses the person exploited (cognitive biases, automatic thinking etc)
* to summarize the main lesson the person teaches us

A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, please send an e-mail to Kaido, stating the chosen time and person to cover. '''There are only 16 presentations in total - first come, first served!''' Others would have to resort to other tasks to pass the course!

=== The Crooks ===

Note: the list is not exhaustive - feel free to suggest others!

* Carlo Ponzi
* Victor Lustig
* Frank Abagnale Jr
* Mark Abene (Phiber Optik)
* Kevin Mitnick
* Susan Headley (Suzy Thunder)
* Kevin Poulsen (Dark Dante)
* Bernie Madoff
* Elizabeth Holmes
* Sam Bankman-Fried
* Mythical and literary characters: Jacob (Old Testament), Odysseus, Iago, Grima Wormtongue...
* BYOC (''Bring Your Own Crook''): introduce a well-known crook from your home country (as we are a very international bunch)!

=== The Seminars ===

The CotW seminars will have the following schedule:
* Tuesday, March 4, at 10:00:
** Alexandar Ivov Nikolov - Kevin Mitnick
** Aleš Sršeň - Frank Abagnale Jr
** Felix Mengele - Bernie Madoff
** Tom Konstantin Ege - Jan Marsalek (BYOC Suggestion)
* Tuesday, March 11, at 10:00:
** Najaf Alkhazov - Matthew Weigman
** Theodor Degen - Sam Bankman-Fried
** Jakub Fleislébr - Elizabeth Holmes
** Timo Uustal - Victor Lustig
* Tuesday, March 18, at 10:00:
** Deborah Allan Chapkovski - Mark Abene (Phiber Optik)
** Thomas Dourgarian - Kevin Poulsen
** Tristan Andersen - Stein Bagger (BYOC)
**
* Tuesday, March 25, at 10:00:
** Jan Polách - Viktor Kožený (BYOC Suggestion)
** Mattia Roveri - Niccolò Machiavelli
** Max Renner - Susan Headley
** Simon Jäschke Carlo Ponzi

[[Social Engineering | Back to the course page]]

ICS0018 CotW seminars

2025-02-05T09:40:37Z

Miriam:

=== The idea ===

The Crook of the Week seminars are meant for student presentations/talks about famous social engineers of the past. Each seminar will host up to
'''four 15-minute presentations''' by different students, plus discussion. The main points of the presentation are
* to introduce the person (biography)
* to explain the motivation behind his/her actions
* to study the ''modus operandi'' (ways) of social engineering by this person
* to outline the main human weaknesses the person exploited (cognitive biases, automatic thinking etc)
* to summarize the main lesson the person teaches us

A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, please send an e-mail to Kaido, stating the chosen time and person to cover. '''There are only 16 presentations in total - first come, first served!''' Others would have to resort to other tasks to pass the course!

=== The Crooks ===

Note: the list is not exhaustive - feel free to suggest others!

* Carlo Ponzi
* Victor Lustig
* Frank Abagnale Jr
* Mark Abene (Phiber Optik)
* Kevin Mitnick
* Susan Headley (Suzy Thunder)
* Kevin Poulsen (Dark Dante)
* Bernie Madoff
* Elizabeth Holmes
* Sam Bankman-Fried
* Mythical and literary characters: Jacob (Old Testament), Odysseus, Iago, Grima Wormtongue...
* BYOC (''Bring Your Own Crook''): introduce a well-known crook from your home country (as we are a very international bunch)!

=== The Seminars ===

The CotW seminars will have the following schedule:
* Tuesday, March 4, at 10:00:
** Alexandar Ivov Nikolov - Kevin Mitnick
** Aleš Sršeň - Frank Abagnale Jr
** Felix Mengele - Bernie Madoff
** Tom Konstantin Ege - Jan Marsalek (BYOC Suggestion)
* Tuesday, March 11, at 10:00:
** Najaf Alkhazov - Matthew Weigman
** Theodor Degen - Sam Bankman-Fried
** Jakub Fleislébr - Elizabeth Holmes
** Timo Uustal - Victor Lustig
* Tuesday, March 18, at 10:00:
** Deborah Allan Chapkovski - Mark Abene (Phiber Optik)
** Thomas Dourgarian - Kevin Poulsen
** Tristan Andersen - Stein Bagger (BYOC)
** Miriam Popič
* Tuesday, March 25, at 10:00:
** Jan Polách - Viktor Kožený (BYOC Suggestion)
** Mattia Roveri - Niccolò Machiavelli
** Max Renner - Susan Headley
** Simon Jäschke Carlo Ponzi

[[Social Engineering | Back to the course page]]

ICS0018 Hands-on seminars

2025-02-05T09:35:17Z

Miriam:

=== The idea ===

The hands-on seminars are a task for '''teams of three''' (initially based on Kristjan Karmo's ScamLab materials). The goal is to learn about different scams in a safe(ish) but real environment. A little side quest is to waste scammers' time so that they can't use it on actual victims.
A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, '''please team up and register below''', in your chosen time slot. '''There are limited presentation slots - first come, first served!''' (note: as people sign up, we will probably have to cram as many presentations as possible into each seminar - but the space is not infinite, we will have more or less 90 minutes for each).

Note: this time, we went from paired work to 3-person teams due to the number of people in the course (the seminar time would not have been enough for pairs).

=== The Task ===

Step 1: Create a fake identity and honeypot email account for engaging with scammers. Other platforms are also welcome, as long as you are able to protect your identity.

Step 2: Distribute the email address on shady or spammy sites, such as social media, online forums, etc. Some tips can be found here https://www.quora.com/How-can-I-get-scam-emails

Step 3: Wait for the scams to start rolling in.

Step 4: Engage! First select if you're going to use a naïve or aggressive approach.

If you don't manage to get any scammers to directly email your newly created address, go look in your regular mailbox, in the spam folder, ask friends & family, etc. NB! Before replying to any of those "crowdsourced" scam emails from your fake account, be sure to delete the address it was originally sent to.

Some tips for safety:
# Never reveal your (or anyone else's) real personal information to the scammers. Make up something realistic.
# Never open any links in emails unless you're in a protected sandbox environment.
# NEVER give out any real financial information, account information, or passwords.
# Always use Multi-Factor Authentication (MFA). Even on your fake accounts.

Here's the grand prize: if you manage to engage with at least 3 scammers for an email chain of 5 messages or more (they respond to at least 2 of your letters in the same thread), and present your findings at one of the seminars, '''you pass the course'''. It's not as easy as it might first seem.

An alternative way to pass is to educate people in your social network, friends, family, coworkers, etc about scams, how to spot them, how to avoid them, what to do if you're already a victim. If you want to use this option, please contact Kaido (over e-mail or MS Teams) and suggest how would you do it.

=== The Seminars ===

The hands-on seminars will have the following schedule:
* Thursday, March 6 at noon (12:00)
** Stiven Lille, Innar Viinamäe, Georg Lee
** ...
** ...
** ...
** ...
* Thursday, March 13 at noon (12:00)
** Valerija Kuzina, Vassili Korobov, Andrei Timoshin
** Miriam Popič
** ...
** ...
** ...
* Thursday, March 20 at noon (12:00)
** Kaspar Sibul, Matīss Ceriņš, Liyanage Don Sithil Insara Liyanage
** Marat Biryukov, Maria Aleksandra Ploduhhina, Kirill Ševtsov
** David Ayson, Angelica Daisi Stewart, Tekla Berozashvili
** Rassell Muru, Ivan Kuznetsov, Andrei Šutkov
** ...
* Thursday, March 27 at noon (12:00)
** Deniss Pavlov, Diana Anastassija Turks, Pavel Shemetov
** ...
** ...
** ...
** ...

[[Social Engineering | Back to the course page]]