Harvesting employees’ data using Hunter
Around the world, employees of many organizations commonly leak and share too much information about themselves and their organization without realizing how a threat actor or adversary can collect and analyze such information to plan a cyber-attack or improve a threat towards their organizations and themselves. Quite often, you’ll notice that many employees of the leadership team for an organization commonly share their contact details on professional social networking platforms, such as the following types of information:
- Full name and job title
- Company’s email address
- Telephone number
- Roles and responsibilities
- Recent projects with technical details
- Pictures of their employee badges
As a penetration tester, it’s quite simple to create an account that will function as a sock puppet on a site such as LinkedIn, populate some false information on the account, such as...
