Namecheap live chat social engineering leads to loss of 2 VPS

Re:Namecheap live chat social engineering leads to loss of 2... by brianwawok on Tuesday April 12, 2016 @11:03AM (#11480149)

Fairly common for enterprise type apps to have a list of preapproved contact points, not on the list they won't even talk to you. Maybe other places could take this up... not foolproof, but at least adds another layer to the challenge.

[ Parent | on HN ]

Re:Namecheap live chat social engineering leads to loss of 2... by nxzero on Tuesday April 12, 2016 @11:12AM (#11480225)

I've personally gotten past lists like that a number of times simply by stating that person is not on staff any more, I'm their replacement; legitimately did replace the old point of contact.

Getting people to do stuff on the phone is easy a huge amount of the time.

[ Parent | on HN ]

Re:Namecheap live chat social engineering leads to loss of 2... by Piskvorrr on Tuesday April 12, 2016 @11:26AM (#11480375)

Indeed. "Oh, we have this completely impenetrable fortress, immune to any sort of attack." "Let me in, pretty pretty please." "Okay."

[ Parent | on HN ]