Phishing attacks are SCARY easy to do!! (let me show you!) // FREE Security+ // EP 2
About this video
In this Security+ episode, he builds a phishing attack against a fictional CEO, Bernard Hackwell, to steal LinkedIn credentials, stressing throughout that it is for education only and requires permission. Using Kali Linux, he clones the BlackEye tool, selects its LinkedIn template, and fixes its ngrok setup by adding a free ngrok account token, producing a fake LinkedIn login page that he demonstrates captures a visitor’s IP, browser info, email, and password while redirecting the victim to real LinkedIn. He then distinguishes delivery methods — phishing by email, smishing by SMS, vishing by voice, and spam over instant messaging — and targeted variants: spear phishing aimed at one person and whaling aimed at a senior executive. He sends the lure with the Social Engineering Toolkit’s mailer options, then shows pharming via a tampered hosts file that overrides DNS. He closes with defenses he recommends: spam filters, not clicking links or downloads, logging in directly instead, verifying senders, and teaching family members the same habits.
Key takeaways
- Credential harvesting uses a cloned login page — here BlackEye’s LinkedIn template via ngrok — to capture entered credentials
- Spear phishing targets a specific person; whaling targets a high-value executive like a CEO
- The same lure can arrive as phishing (email), smishing (SMS), vishing (voice call), or SPIM (instant message)
- Pharming poisons DNS, in the demo by editing the hosts file, so even typing the real domain reaches the fake site
- Defense he stresses: use spam filters, don’t click emailed links, navigate to the service directly, and verify the sender
Episode details: published October 28, 2020 · 17:54 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.
← Previous: VMware on a Raspberry Pi!?!?! (ESXi Install) · Next: WAN….it’s not the internet!! (sometimes) // FREE CCNA // EP 8 →
All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube
