i hacked my grandma (social engineering and pretexting) // FREE Security+ // EP 3

About this video

In this CompTIA-sponsored Security+ episode on social engineering, Chuck demonstrates pretexting, inventing a false identity and story to elicit information by phone, a voice-based attack he calls vishing. Using a Raspberry Pi running a 3CX phone system to spoof the local store’s caller ID and a voice modifier to become ‘Anita,’ he calls his wife posing as Lowe’s about a front door she had actually recently bought, and his grandmother posing as State Farm about insurance she had complained about on social media, even priming his wife with a missed call the day before so the store seemed to already be trying to reach her. Both targets give up their home address but refuse to provide credit card details or even the last four digits, including under a manufactured urgency claim that a payment had failed and coverage lapsed; he says he is proud of both. He then widens to identity theft: in 2019, 14 million people in the US had their identity stolen, and attackers build profiles from social media, elicited details, and data breaches, citing Microsoft, MGM Resorts, and T-Mobile breaches from that year. He checks his own email on Have I Been Pwned and finds 16 breach sites, urging password changes, vigilance, and monitoring services. The episode closes with tailgating, where an attacker dressed to blend in exploits the social pressure to hold a badge door open, then walks an office unchallenged by simply acting like they belong.

Key takeaways

• Pretexting works by building a believable story from real details the target recognizes, then eliciting information by phone; caller ID was spoofed with a Raspberry Pi phone system and a voice modifier
• Urgency is a core lever: the grandmother was told her insurance payment failed and she was uncovered, a pressure tactic meant to rush out card details
• Both targets shared their address but refused credit card information, showing partial caution is common and addresses are given away too easily
• Identity theft is fed by social media oversharing and mass data breaches; checking Have I Been Pwned showed his own email in 16 breach sites, so reused, unchanged passwords are a major risk
• Tailgating exploits politeness at badge doors: never hold a secured door for someone, because confidence and matching dress code let impersonators walk in unquestioned

Episode details: published November 10, 2020 · 16:11 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.

← Previous: WAN….it’s not the internet!! (sometimes) // FREE CCNA // EP 8 · Next: your favorite websites can be HACKED! (watering holes, typo squatting) // FREE Security+ // EP 4 →

All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube