Documented social engineering incidents targeting the cybersecurity industry sector, sourced and fact-checked.
A job candidate at Vidoc Security Lab hid behind a real-time face filter and refused to cover his face. What happened, what's verified and what to check.
DocumentedKnowBe4 hired a North Korean operative using a stolen US identity and an AI-enhanced photo in 2024. Malware started on his laptop; it was contained in 25 min.
Research/advisoryImperva hid prompt injections behind whitespace in contact names, vCards and WhatsApp pins, making an OpenClaw agent run a script. A lab demo, now patched.
Research/advisoryGoogle found PROMPTFLUX, a dropper that asks Gemini for antivirus-evasion code mid-run. Its self-rewrite feature was switched off and it hit no one.
DocumentedFraudGPT was sold at $200 a month as an unrestricted AI for phishing. When Cisco Talos tried to buy it, the logins were dead. What that tells us.
Social Engineering Examples