Sign in

Christina Lekati

@christinalekati.bsky.social
3.8K followers 97 following 158 posts

#SocialEngineering, #Psychology, #HUMINT & #OSINT intertwined for the sake of security.

PostsRepliesMedia
Reposted by Christina Lekati
evacide @evacide.bsky.social · 28/09/2026
Meta Muse appears to read your Apple messages and upload them to the cloud even if you explicitly tell it not to: appleinsider.com/articles/26/...
appleinsider.com
10120111022
Christina Lekati @christinalekati.bsky.social · 24/07/2026
Another sabotage incident targeting Germany's railway infrastructure. An extremist group claimed responsibility for this one. The group published details about the attack online, including the targeted locations and the methods they used. 🧵
121
Reposted by Christina Lekati
Layer 8 Conference and Podcast @layer8conference.com · 02/06/2026
The two keynote speakers this year: @christinalekati.bsky.social with "The Social Engineering Threat Landscape: Campaigns, Actors, and Emerging Trends" - Fri 1:00 pm @webbreacher.com with "Become a Creator -- Building the Community That Builds OSINT" - Sat 1:30 pm layer8conference.com
021
Reposted by Christina Lekati
Layer 8 Conference and Podcast @layer8conference.com · 31/05/2026
The Layer 8 Conference is this week! Friday, Saturday in Boston. Two tracks, OSINT and Social Engineering. Two keynotes with @christinalekati.bsky.social and @webbreacher.com. We'll have SockPuppet, OSINT Industries and Maltego leading off the partners hall. layer8conference.com
012
Christina Lekati @christinalekati.bsky.social · 15/05/2026
This June, together with the @layer8conference.com we offer a true deep-dive in social engineering! Join us for a 2-day hands-on training followed by a conference focusing exclusively on Social Engineering & OSINT! 🙌🏻⬇️
022
Christina Lekati @christinalekati.bsky.social · 05/05/2026
Here is @layer8conference.com giving you an amazing reason to come and learn #socialengineering with us! I can't wait to join the conference and teach this class!!
021
Christina Lekati @christinalekati.bsky.social · 29/04/2026
Postcards from #BlackHatAsia and Singapore! Always grateful to have the opportunity to teach in such diverse, multicultural classes. A big thank you to everyone who joined us, shared their perspectives, asked questions, and spent 2 days learning and working on their investigative skills with us!
020
Christina Lekati @christinalekati.bsky.social · 27/04/2026
Only 5 weeks left until the next open class "𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐟𝐨𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐚𝐦𝐬" that is going to happen in-person at the @layer8conference.com in Boston (US)! ***There will also be a FREE conference ticket for all participants attending a training!***
132
Christina Lekati @christinalekati.bsky.social · 13/04/2026
We know it happens, we talk about it in training, yet there is always a veil of doubt. Here is a rare public account of a #socialengineering op that started IN-PERSON & in a targeted way, ran for about 6 months, & cost Drift (a Solana-based DEX) $285 Million. This is a truly sophisticated attack.🧵
131
Reposted by Christina Lekati
Layer 8 Conference and Podcast @layer8conference.com · 24/03/2026
Want a free ticket to Layer 8 Con? Sign up for "Social Engineering for Security Teams" by @christinalekati.bsky.social! A two-day immersive hands-on class that will teach all aspects of social engineering testing! layer8conference.com www.zeffy.com/en-US/ticket...
layer8conference.com
Layer 8 Conference – Social Engineering and OSINT – Boston, MA
012
Christina Lekati @christinalekati.bsky.social · 16/03/2026
VERY excited that I’ll be part of the @layer8conference.com this year delivering a keynote and a 2-day training class on Social Engineering! Looking forward to meeting the Social Engineering & OSINT community in Boston. This will be fun! ✌🏻
041
Christina Lekati @christinalekati.bsky.social · 13/02/2026
If you think AI and deepfakes are THE name of the game in "sophisticated" social engineering attacks, think again. AI-gen deepfakes are often just one step (a final blow) in a larger social engineering kill-chain. In this week's SE case, we see a layered intrusion. cloud.google.com/blog/topics/...
cloud.google.com
UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering | Google Cloud Blog
North Korean threat actors target the cryptocurrency industry using AI-enabled social engineering such as deepfakes, and ClickFix.
120
Christina Lekati @christinalekati.bsky.social · 03/02/2026
𝐎𝐮𝐫 "𝐅𝐮𝐧𝐝𝐚𝐦𝐞𝐧𝐭𝐚𝐥𝐬 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐇𝐮𝐦𝐚𝐧 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞" 𝐜𝐥𝐚𝐬𝐬 𝐢𝐬 𝐫𝐞𝐭𝐮𝐫𝐧𝐢𝐧𝐠 𝐭𝐡𝐢𝐬 𝐬𝐩𝐫𝐢𝐧𝐠 𝐭𝐨 @blackhatevents.bsky.social 𝐀𝐬𝐢𝐚 𝐢𝐧 𝐒𝐢𝐧𝐠𝐚𝐩𝐨𝐫𝐞! 🎉 For details & registrations: blackhat.com/asia-26/trai...
100
Christina Lekati @christinalekati.bsky.social · 08/01/2026
Berlin was faced with a 2nd arson attack on their power grid within a few months, leaving thousands of households without power, for days. Several systems were damaged simultaneously deeming any backup systems, ineffective. An attack like this requires some reconnaissance. 🧵
1126
Christina Lekati @christinalekati.bsky.social · 04/08/2025
3 resources in 1 post: Open AI has released a new report outlining the ways in which threat actors used their generative AI products to support their social engineering attack operations. They provide the case studies. openai.com/global-affai... Why is this useful? 🧵
openai.com
Disrupting malicious uses of AI: June 2025
Our latest report featuring case studies of how we’re detecting and preventing malicious uses of AI.
150
Christina Lekati @christinalekati.bsky.social · 16/07/2025
Happy news!! This September at @brucon we will be taking a deep dive into #socialengineering and #OSINT through a 3-day, hands-on training class! I SO look forward to it and to meeting the participants!! 🤩👩🏻‍💻 Full class content & details: www.brucon.org/training-det...
040
Christina Lekati @christinalekati.bsky.social · 17/06/2025
Very grateful for last week spent at X33fcon in Poland! It started with 2 days full of #socialengineering & #OSINT training where I had the privilege to teach a class that was present, curious, and ready to try things out. Big bonus: reconnecting with friends during the conference days afterwards😊
141
Reposted by Christina Lekati
Christina Lekati @christinalekati.bsky.social · 21/05/2025
Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks. I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape. christina-lekati.medium.com/when-ai-goes...
christina-lekati.medium.com
When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks
Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…
002
Christina Lekati @christinalekati.bsky.social · 21/05/2025
Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks. I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape. christina-lekati.medium.com/when-ai-goes...
christina-lekati.medium.com
When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks
Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…
002
Christina Lekati @christinalekati.bsky.social · 07/05/2025
There are a few things different this time around. 👇🏻 New class modules: 🔸️State-Sponsored social engineering schemes 🔸️Using AI for OSINT tasks (responsibly) 🔸️How attackers are using AI to supercharge their SE. Hands-on, practical & realistic. See you at x33fcon in only 4 weeks! 😱🥳
x33fcon.com
x33fcon
000
Christina Lekati @christinalekati.bsky.social · 02/05/2025
If you are using #HUMINT techniques in your #CTI process, this is a talk worth watching. Eliska & Julien do a great job in breaking down important concepts, risks, benefits & analytical aspects of using HUMINT tactics in a CTI workflow ⬇️ youtu.be/o1TTO5d1DXQ?...
youtu.be
It's so overt it's covert: leveraging classic HUMINT tactics in CTI investigations
YouTube video by SANS Digital Forensics and Incident Response
100
Reposted by Christina Lekati
Dutch_OsintGuy @dutchosintguy.bsky.social · 02/04/2025
New blog: The Slow Collapse of Critical Thinking in OSINT due to AI "OSINT used to be a thinking game. Now it’s becoming a trusting game and that should terrify you." #OSINT #OSINT4good #AI Read the blog here: www.dutchosintguy.com/post/the-slo...
75521
Christina Lekati @christinalekati.bsky.social · 31/03/2025
Surprise! Really excited to announce that the next "𝑺𝒐𝒄𝒊𝒂𝒍 𝑬𝒏𝒈𝒊𝒏𝒆𝒆𝒓𝒊𝒏𝒈 & 𝑶𝒑𝒆𝒏-𝒔𝒐𝒖𝒓𝒄𝒆 𝑰𝒏𝒕𝒆𝒍𝒍𝒊𝒈𝒆𝒏𝒄𝒆 𝒇𝒐𝒓 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 𝑻𝒆𝒂𝒎𝒔" open class will be happening at x33fcon in Gdynia, Poland!! This is an intensive, 2-day training 🧵
120
Christina Lekati @christinalekati.bsky.social · 14/03/2025
Not that hotel rooms have the best locking mechanisms, but leaving a room fully accessible after exiting is a whole other level. Check your doors when you leave, people.
010
Reposted by Christina Lekati
dell cameron @dell.bsky.social · 11/03/2025
A WIRED must-read today on Boeing by @laurensmiley.bsky.social:
wired.com
The Worst 7 Years in Boeing’s History—and the Man Who Won’t Stop Fighting for Answers
Fatal crashes. A door blowout. Grounded planes. Inside the citizen-led, obsessive campaign to hold Boeing accountable and prevent the next disaster.
218041
Reposted by Christina Lekati
Patrick C Miller @patrickcmiller.bsky.social · 11/03/2025
Switzerland mandates 24-hour cyberattack reporting for critical infrastructure operators from April
buff.ly
Switzerland mandates 24-hour cyberattack reporting for critical infrastructure operators from April
Switzerland Mandates 24-hour Cyberattack Reporting for Critical Infrastructure, Effective April 1, with Fines Starting October 1.
012
Christina Lekati @christinalekati.bsky.social · 28/01/2025
How can HUMINT be leveraged in Cyber Threat Intelligence? The Dark Overlord investigation is an interesting report showcasing how HUMINT helps better understand threat actor activities, and even infiltrate their inner circles to uncover real identities. Some notes 🧵 nightlion.com/wp-content/u...
100
Reposted by Christina Lekati
hakan @hatr.bsky.social · 24/01/2025
„her threat hunters detected the Chinese government goons in federal networks before the far-reaching espionage campaign against people's telecommunications providers had been found and attributed to Salt Typhoon.“ www.theregister.com/2025/01/15/s...
theregister.com
Salt Typhoon spies spotted on US govt networks before telcos
We are only seeing 'the tip of the iceberg,' Easterly warns
0104
Reposted by Christina Lekati
Christina Lekati @christinalekati.bsky.social · 14/01/2025
"𝑾𝒆𝒍𝒍, 𝑰’𝒎 𝒏𝒐𝒕 𝒓𝒆𝒂𝒍𝒍𝒚 𝒔𝒖𝒑𝒑𝒐𝒔𝒆𝒅 𝒕𝒐 𝒔𝒉𝒂𝒓𝒆 𝒕𝒉𝒊𝒔, 𝒃𝒖𝒕…" Used in social engineering, intelligence collection, & negotiations, elicitation is the subtle art of extracting sensitive information during a seemingly regular conversation. Read more in my new blog: christina-lekati.medium.com/elicitation-...
christina-lekati.medium.com
ELICITATION TECHNIQUES
Covert Information Collection From Human Sources
2136
Reposted by Christina Lekati
Christina Lekati @christinalekati.bsky.social · 07/01/2025
The new year has come around and we kick it off with 2 new online classes! 🔹 On the 21st of January I will be giving a 4-hour online class on #Elicitation 𝗧𝗲𝗰𝗵𝗻𝗶𝗾𝘂𝗲𝘀. 🔹 On the 28th of January @osintgeek.de will be teaching #Telegram 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀. ⬇️🧵
123
Christina Lekati @christinalekati.bsky.social · 14/01/2025
"𝑾𝒆𝒍𝒍, 𝑰’𝒎 𝒏𝒐𝒕 𝒓𝒆𝒂𝒍𝒍𝒚 𝒔𝒖𝒑𝒑𝒐𝒔𝒆𝒅 𝒕𝒐 𝒔𝒉𝒂𝒓𝒆 𝒕𝒉𝒊𝒔, 𝒃𝒖𝒕…" Used in social engineering, intelligence collection, & negotiations, elicitation is the subtle art of extracting sensitive information during a seemingly regular conversation. Read more in my new blog: christina-lekati.medium.com/elicitation-...
christina-lekati.medium.com
ELICITATION TECHNIQUES
Covert Information Collection From Human Sources
2136
Christina Lekati @christinalekati.bsky.social · 07/01/2025
The new year has come around and we kick it off with 2 new online classes! 🔹 On the 21st of January I will be giving a 4-hour online class on #Elicitation 𝗧𝗲𝗰𝗵𝗻𝗶𝗾𝘂𝗲𝘀. 🔹 On the 28th of January @osintgeek.de will be teaching #Telegram 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀. ⬇️🧵
123
Christina Lekati @christinalekati.bsky.social · 15/12/2024
Snapshots from #BlackHatEurope! Spent the week giving our 2-day training to a largely diverse class, strolling around London, celebrating a birthday (thanks to @osintgeek.de who is the best work buddy you can have), and attending the conference! You can say it was a real FULL week.
0112
Christina Lekati @christinalekati.bsky.social · 02/12/2024
Cyber Monday has come around and this is the last chance to invest in learning and developing new skills for a 30% off ALL of our classes! If you have been wanting to learn OSINT, HUMINT, Elicitation techniques or investigating Telegram, this is a very good chance. More details below ⬇️ Enjoy!
011
Reposted by Christina Lekati
Digital Trails Academy @d1g1taltrails.bsky.social · 29/11/2024
🚨 It's here! Our ONLY SALE of the year! 🚨 Get 30% OFF ALL of our courses-including the new ones! 🤯 This Sale Ends on Cyber Monday: 2 December 2024 at 23:59 CET! Code: WHISPERS Let's see an overview of the classes included 🧵 #BlackFriday #OSINT #SOCMINT #HUMINT #OpenSourceIntelligence #Training
154
Christina Lekati @christinalekati.bsky.social · 27/11/2024
Tale (almost) as old as the hacker space 🙃 Not just with China...
010
Reposted by Christina Lekati
Joseph Cox @josephcox.bsky.social · 26/11/2024
New from 404 Media: Bluesky may have said it won't use user data to train generative AI, but someone else just published a dataset of million Bluesky posts for "machine learning research". Already very popular dataset, your data may be scraped www.404media.co/someone-made...
404media.co
Someone Made a Dataset of One Million Bluesky Posts for 'Machine Learning Research'
A Hugging Face employee made a huge dataset of Bluesky posts, and it’s already very popular.
1141549788
Reposted by Christina Lekati
Baptiste Robert @fs0c131y.com · 27/11/2024
On January 30, 2025, I’m hosting an online GEOINT workshop! Join this 4-hour training session to learn how to geolocate images and videos effectively Get all the details and register here: www.eventbrite.fr/e/predicta-l...
062
Christina Lekati @christinalekati.bsky.social · 26/11/2024
Our 2-day training at #DeepSec is a wrap! It was the first time I delivered a deep-dive focusing entirely on the #psychology interplaying in social engineering & HUMINT operations at a cybersecurity conference. It is very energizing to have a class full of curious minds!
1160
Reposted by Christina Lekati
Christina Lekati @christinalekati.bsky.social · 12/03/2024
If you are reading this post , do take a few minutes to run a quick OSINT check on documents and files that might expose your organization... (Why? Read in the thread below) Here is an article I wrote on how to conduct an initial research on your own: medium.com/@christina-l...
medium.com
OSINT Techniques for Sensitive Documents That Have Escaped Into The Clear Web
I have been working full-time in this industry for about 8 years. Part of my work involves conducting vulnerability assessments for…
152
Christina Lekati @christinalekati.bsky.social · 10/11/2024
There it is! The bookmark function! 😃
131
Reposted by Christina Lekati
OSINT-Research 🕵️ @osint-research.bsky.social · 09/11/2024
Made an #OSINT starter pack with many OSINT people from all over. go.bsky.app/TSvKc6o Let me know who I missed!
2113149
Christina Lekati @christinalekati.bsky.social · 04/11/2024
Less than 2 weeks left to register for the class: “Look What You Made Me Do”: The Psychology behind Social Engineering & Human Intelligence Operations - taking place at DeepSec in Vienna on the 19th & 20th of November! deepsec.net/speaker.html...
100
Christina Lekati @christinalekati.bsky.social · 03/11/2024
LLMs for parts of OSINT, not LLMs for all #OSINT. Hallucinations are part of their output - and this will most probably not go away. Take our your thin toothed comb, evaluate, and verify LLM output through additional souces. futurism.com/the-byte/ope...
futurism.com
OpenAI Research Finds That Even Its Best Models Give Wrong Answers a Wild Proportion of the Time
OpenAI has released a new benchmark dubbed "SimpleQA" to measure the accuracy of its AI models. The results are damning.
000
Christina Lekati @christinalekati.bsky.social · 26/10/2024
It's a happy Saturday! Kicking off BSides Berlin with a new presentation "In Deception We Trust" - the modern social engineering exploits against centuries-old human vulnerabilities 🎭
040
Christina Lekati @christinalekati.bsky.social · 01/10/2024
North Korea attacked the Diehl Defense (a weapons manufacturer specializing in advanced military technology) through a #socialengineering campaign. The pretext? Emails impersonating U.S. arms suppliers offering lucrative job offers. www.spiegel.de/netzwelt/web...
spiegel.de
Diehl Defence: Hacker aus Nordkorea zielen auf Mitarbeiter des Rüstungskonzerns
Die deutsche Firma Diehl Defence stattet das südkoreanische Militär mit dem Lenkflugkörper Iris-T aus. Nun sind Mitarbeiter ins Visier der staatlichen Hacker von Nordkoreas Diktator Kim Jong Un gerate...
010
Christina Lekati @christinalekati.bsky.social · 30/09/2024
Beyond excited to share that one of our most fun, interactive & knowledge-dense classes returns, this time at @BlackHatEvents Europe! 🎉 The talented @OSINTgeek & I will be teaching our "Fundamentals of Cyber Investigations & Human Intelligence" class on the 9-10th of December in London!
120
Christina Lekati @christinalekati.bsky.social · 31/07/2024
With summer taking over and as things naturally slow down these weeks, it is my favorite time for rest, research, and going down some rabbit holes! Expect interesting new things and new classes coming from September on! 🤓🏖📚 What are you doing this summer? 🌞
media.tenor.com
Books The Book GIF
ALT: Books The Book GIF
000
Christina Lekati @christinalekati.bsky.social · 04/07/2024
Highly recommended book for the ones interested in how advanced threat actors operate and in the dynamics around cyberwarefare and state-sponsored attacks. Some very good case studies are included! Summer is here and it's my time to tackle a long reading list:)
020
Reposted by Christina Lekati
Layer 8 Conference and Podcast @layer8conference.com · 08/05/2024
Are you doing phishing testing? Are you doing it badly? On this week's Layer 8 Podcast, Rebecca Markwick explains what we do wrong, how it causes harm and how to do them better. podcasters.spotify.com/pod/show/lay...
podcasters.spotify.com
Episode 104: Why Phishing Simulations Suck with Rebecca Markwick by Layer 8 Podcast
Bex Markwick joins us today to tell us what she feels is wrong about the way we do phishing testing today. We'll talk about some of the areas where those might not go in the right direction and why, b...
011