Snow @_sn0ww Twitter profile

Pinned Tweet

Snow

11 months

✨ New SE & AI Research ✨ Recently I performed a research project comparing the effectiveness of phishing emails: one crafted by humans 💪, another by advanced AI 🤖. Who do you think would get more clicks? Blog: 🧵

AI vs. human deceit: Unravelling the new age of phishing tactics

Phishing is a tried and true way for threat actors to get the information they want. Let's explore their newest tactics and how to spot them.

securityintelligence.com

8

16

41

Last Seen Profiles

@IsuphJt

@mr_alfar

@Sverigesriksdag

@smcitylipa

@elbirdleaf

@rybabyxox

@hellomeiminato

@DARK_LE1GON

@bokeplokalmalam

@NightlyVR

@stakecut

@UnaiAsla

@conexgoleadora

@mst_2023

@hippensteelmax2

@y_y15y_y

@bokeplokalmalam

@Usio_9

@HerraMassage

@Tante_Binal69

@stwmaniax

@freethought3D

@finexify

@stwmaniax

@lionsclubs

@Nonhlanhla25191

@FMohammadi77

@AiiNaja

@coach_swole

@KaikOliveirax

@michellethestan

@DSA_DuelClub

@NorwegianAidUkr

@SAU_DEVOBBALL

@stw_pdg

@galery_basah10

Snow

@_sn0ww

5 years

How baby IoTs are made...

44

466

2K

Snow

@_sn0ww

6 years

Inigo's Guide to Networking Success!

14

780

2K

Snow

@_sn0ww

3 years

Apparently you can’t use “beef stew” as a password... it’s not stroganoff

67

261

2K

Snow

@_sn0ww

7 years

My 7yo: On Halloween can we pass out USBs, instead of candy, and when they plug it in something scary pops up? Me: 🤤

53

443

2K

Snow

@_sn0ww

7 years

What's your hacker name?

200

603

1K

Snow

@_sn0ww

5 years

🎣 Summertime Phishing Idea Thread 🎣 📧 New Dress Code Policy - Please see the attached file for examples of what IS and ISN'T appropriate dress attire for this summer in the office.

77

254

1K

Snow

@_sn0ww

4 years

I don't know who needs to hear this but it's time to update your password to Fall2020

78

182

1K

Snow

@_sn0ww

3 years

I SAID YES ❤️❤️❤️💍💍💍🎉🎉🎉 to the helpdesk support agent who asked if I needed help resetting my password without verifying me.

21

46

833

Snow

@_sn0ww

2 years

What are some of the most cringey infosec marketing terms you've seen? I'd think "hack-proof" and "military grade" would have to be on that list

178

48

812

Snow

@_sn0ww

5 years

Friendly reminder to make your google docs stuff private. Until then I'll keep looking at your resumes which includes PII and other info I can use for spear phishing... site: resume -template $name

25

274

812

Snow

@_sn0ww

7 years

USB Drop file names - Holiday edition 🎅 📎Holiday Bonus Structure 📎Q4 Bonuses 📎Q1 Employee Termination List (so its not 🎄 but v juicy) 📎 $companyName Christmas Party Guests Appearance 📎 Employee Holiday Gift Receipts

33

285

803

Snow

@_sn0ww

5 years

Vishing today and the cat creeped into my office... Cat: MEOOOOOOOOW Me: 😬😳 Target: Ah, working from home today? Me: Yup, on Mondays... since I have you - do you mind helping me connect to the VPN? I've been having some issues. Target: Sure thing Thanks, cat?

20

52

802

Snow

@_sn0ww

6 years

17

219

774

Snow

@_sn0ww

5 years

Get in hackers, we're going social engineering.

26

63

706

Snow

@_sn0ww

7 years

You've been cordially invited... 📎NYE_Plans.pdf.exe

37

161

643

Snow

@_sn0ww

4 years

What can you say during sex, but also on a security assessment report?

373

89

655

Snow

@_sn0ww

4 years

infosec: why doesnt anyone take us seriously? *looks through infosec twitter*

49

54

638

Snow

@_sn0ww

6 years

On my last physical assessment, I asked an employee to "print off a file" from my USB flash drive, and ended up teaching them how to find the USB port on their PC and open files off the USB... see, I am helpful. A monster, but a helpful one.

26

78

634

Snow

@_sn0ww

5 years

Nothing is sexier then someone who holds the door open for others. Especially into secure floors.

21

60

584

Snow

@_sn0ww

4 years

One minute you're young and fun. The next you're turning down the music in your car to see better.

17

49

526

Snow

@_sn0ww

2 years

she's a 10 but this is her toolbar

57

41

513

Snow

@_sn0ww

5 years

When I first got into infosec I had people who told me that no one would ever hire me, as a dedicated social engineer. I took that (wrong) advice to prove to them that I could. Don't ever let anyone else dictate what you can or can't do.

19

41

503

Snow

@_sn0ww

3 years

When your phish gets reported 😒 But then the SOC reviews it and tells employees it's legit 😏

37

31

514

Snow

@_sn0ww

4 years

I can't be the only one here with a black hoodie on and an office in a basement. Some of yall are lying.

104

12

502

Snow

@_sn0ww

4 years

I do not have ducks or a row. I have squirrels. And they're at a rave.

25

70

496

Snow

@_sn0ww

6 years

Ha! Man stole $122m from Facebook and Google by sending them random bills, which the companies dutifully paid

Man stole $122m from Facebook and Google by sending them random bills, which the companies dutifu...

Last week, Evaldas Rimasauskas of Lithuania plead guilty to US wire fraud, aggravated identity theft, and money laundering charges, admitting that he had stolen $99m from Facebook and $23m from…

boingboing.net

13

187

482

Snow

@_sn0ww

6 years

Hey, @HiltonHotels I understand your reason for disregarding the DND sign on my door after 24 hours. But at least require your staff to knock before bursting in. Having a man force open my door unannounced as a single traveler is terrifying! My heart is still racing.

62

88

480

Snow

@_sn0ww

2 years

Almost choked on my coffee when I read the word "Quishing"

CyberNews

@CyberNews

2 years

#Cybercriminals are including #QR codes into #phishing attacks, a practice known as Quishing. #cybersecurity #cyberattack

23

79

135

42

64

468

Snow

@_sn0ww

5 years

Aww ya! Thanks @NotMedic 😊

20

19

461

Snow

@_sn0ww

5 years

Die Hard IS a Christmas movie... fite me IRL

39

85

455

Snow

@_sn0ww

6 years

My mom asked me if I take "trophies" from client sites that I break into. I think she's confusing me with a serial killer. 🤔

31

33

448

Snow

@_sn0ww

5 years

Hi, I'm Snow. I enjoy long walks on the beach and tailgating into secure places I shouldn't be in.

15

19

454

Snow

@_sn0ww

3 years

If you have a Bitly link, let's use for example... but you don't want to click it, add a + to the end of the link to get more information like when it was created AND the full URL of where it leads to:

24

163

432

Snow

@_sn0ww

4 years

I *really* miss breaking into buildings.

30

14

427

Snow

@_sn0ww

6 years

oh...... oh, no

Erik

@MyTweetsAreAss

6 years

Cool debit card CCV codes: A Thread

39

50

174

24

62

422

Snow

@_sn0ww

1 year

Tell me you're a hacker, without telling me you're a hacker

590

43

410

Snow

@_sn0ww

5 years

I've seen a number of friends looking for employment and others posting job openings lately. Use this thread to post jobs you're looking/hiring for below ⬇️⬇️⬇️

124

195

413

Snow

@_sn0ww

8 years

Trying to make friends in the airport Me: so what do you do? Guy: I'm a pastor, what about you? Me: I lie to people and break into buildings

12

73

410

Snow

@_sn0ww

3 years

What is advice you'd give to someone starting a career in infosec?

162

67

401

Snow

@_sn0ww

6 years

God, I love my job. Especially explaining what I do to the other soccer moms. Can you imagine their conversation later with their SO? Soccer Mom: She just... breaks into buildings SO: Thats call a criminal, honey SM: No, she gets paid to do it SO: Again, criminal

17

39

406

Snow

@_sn0ww

5 years

When the client says that you can't impersonate employees *exactly*

16

70

387

Snow

@_sn0ww

4 years

Pleasing everyone is impossible. Pissing everyone off is easy.

17

49

381

Snow

@_sn0ww

5 years

This is true.

12

66

372

Snow

@_sn0ww

3 years

Tell me you're in security without telling me you're in security

406

35

357

Snow

@_sn0ww

4 years

Got a new side job as a social media manager... what do yall think of my first tweet?

adult swim

@adultswim

4 years

What’s your wifi password?

1K

341

4K

18

9

363

Snow

@_sn0ww

3 years

Tell me you're a social engineer without telling me you're a social engineer

251

27

364

Snow

@_sn0ww

3 years

How about some Twitter #OSINT tools? This thread I'll show a few of my favorites. However, like most Social Media OSINT tools they tend to come and go. 🧵

11

77

365

Snow

@_sn0ww

3 years

Excited I dropped 20 lbs, I've been busting my ass. Still a lot more to go, but it feels great 😅

18

0

364

Snow

@_sn0ww

5 years

I had so much fun doing this segment! Watch me conduct OSINT against @DanPatterson and @GrahamKates of @CBSNews and see what I was able to find #XForceRed

A hacker invaded 2 CBS reporters' lives without writing a single line of code

She is a social engineer and a master of disguise who is paid to think like a criminal in order to "hack" the human psyche.

www.cbsnews.com

24

96

360

Snow

@_sn0ww

6 years

Most girls when cleaning out their purse... Lipstick Hair pony Chapstick Target receipts Me cleaning out my purse... Lipstick Lockpicks 27 badges Lockpicks

15

360

Snow

@_sn0ww

6 years

Drink more water.

12

69

348

Snow

@_sn0ww

5 years

I imagine if I ever did a physical security assessment with @TinkerSec you'd probably hear me say things like: "Tinker we can't kick down doors" "Tinker go put the DC server back, theft isn't in scope" "Tinker that one is my wig, go get your own" "Tinker use your inside voice"

17

14

343

Snow

@_sn0ww

4 years

I need a hug.

114

7

330

Snow

@_sn0ww

5 years

I run a tight shipwreck.

9

43

329

Snow

@_sn0ww

5 years

Before going out in public, PLEASE ask yourself: Is it worth it? Can I work it? Can I put my thing down, flip it, and reverse it?

17

52

321

Snow

@_sn0ww

1 year

I’ve seen a lot of concern around the new .zip gTLD. Let’s look a little deeper into what this means, from my (attacker) perspective. Thread 🧵

7

84

326

Snow

@_sn0ww

5 years

Ask Google why Cornflakes were invented. You're welcome.

88

65

325

Snow

@_sn0ww

5 years

#SocialEngineering ProTip When Vishing ☎️ add background noise to give credibility to your pretext, or to add a sense of urgency! Airport Train station Busy city Office building

Office Sound 2 Hours

Busy office ambience going on for 2 hours. Seamlessly gapless looping. Printers, keyboards, workers, coworkers, bosses, people and writing on paper with a pe...

www.youtube.com

10

92

328

Snow

@_sn0ww

4 years

How it started: How it's going:

25

6

321

Snow

@_sn0ww

7 years

When you cell phone corrects "shh" to "ssh" 🤷‍♀️

11

33

317

Snow

@_sn0ww

7 years

In recovery from surgery and on a walk I made the nurse a bet for two jello cups that I knew the code to their Simplex locks. Guess who has two jellos?

21

29

313

Snow

@_sn0ww

6 years

I was going to quit all my bad habits for the new year, but then I remembered... nobody likes a quitter

12

39

305

Snow

@_sn0ww

4 years

Be sure to bring up politics this Thanksgiving. It'll save you money on Christmas gifts. Follow me for more life hacks.

11

38

297

Snow

@_sn0ww

2 years

It is totally normal to walk by a building and think of how you'd break into it. Right? 😬

65

13

300

Snow

@_sn0ww

7 years

Pentesters: what has been your favorite find during an assessment?

137

125

295

Snow

@_sn0ww

4 years

Happy Spring, folks! Don't forget to update your passwords to Spring2021!

18

47

303

Snow

@_sn0ww

4 years

My new year resolution is to break into more buildings.

13

10

289

Snow

@_sn0ww

5 years

They say timely pretexts are the best pretexts. I totally don't want onto your secure floor for reasons other than passing these bad boys out...

22

33

294

Snow

@_sn0ww

5 years

Sigh

16

29

292

Snow

@_sn0ww

5 years

Client: we want this test to be as real world as possible Me: awesome, I found x, y, and z info during osint, I'm going to create a phishing campaign around it Client: uh, let's not... that will work too well Me: ....

17

42

300

Snow

@_sn0ww

5 years

Adulthood has taught me that you really don't need fun to have alcohol

3

21

294

Snow

@_sn0ww

4 years

My little just asked me "mom, what if one of Santa's first stops is at someone's house who has the coronavirus then he spreads it at every house he stops at afterwards?" 🙃🙃🙃

19

21

283

Snow

@_sn0ww

3 years

when cleaning your desktop yall just move all of your files to a folder called "clean me" too, right?

117

3

287

Snow

@_sn0ww

4 years

I'm a simple woman, really. I enjoy long walks on the beach and your credit card number.

19

55

281

Snow

@_sn0ww

4 years

Just spent over an hour shoveling snow with my dad. He turned to me and asked "still like your nickname?" 😒

12

5

277

Snow

@_sn0ww

7 years

"Lock picking is fidget spinners for hackers" - @SteveD3

4

113

273

Snow

@_sn0ww

2 months

My 16yo attended @defcon for the first time this year I asked him what he thought about it, he said "everyone I talked to was so cool and open to talking to me or teaching me things" 😭🥰

11

12

281

Snow

@_sn0ww

6 years

This community is pretty small. Everyone knows everyone, and everyone talks. Kinda scary how a rumor can completely blacklist someone. Here's your friendly reminder that there are three-sides to every story and to never take information at face value.

13

38

273

Snow

@_sn0ww

5 years

I don't know who needs to hear this, but you should probably stop clicking on the links I send you.

23

15

262

Snow

@_sn0ww

3 years

welp... I tested positive for covid and feeling like absolute trash :( pls send memes

122

4

260

Snow

@_sn0ww

4 years

You're in her DMs I'm in her IoT wand It's not the same, sis

10

17

265

Snow

@_sn0ww

8 years

8yo: Can I 3d print a tooth? Me: Sure, why? 8yo: I want to try and trick the tooth fairy for some extra cash

15

102

252

Snow

@_sn0ww

6 years

When you notice you're in a clients holiday party photo on their website from doing a physical around the holidays 😅😂

11

21

253

Snow

@_sn0ww

3 years

"My girlfriend and I saw you from across the bar and we're really digging your vibe. Can we buy you a drink?"

10

7

251

Snow

@_sn0ww

5 years

Excited and honored to have my own #facesofdefcon picture 😊

19

7

247

Snow

@_sn0ww

6 years

Hi all - please kindly endorse me on LinkedIn for this new skill.

12

10

241

Snow

@_sn0ww

5 years

I'm a simple girl, really... I just want to break into buildings and phish for your CFO's password.

14

247

Snow

@_sn0ww

5 years

The hairs on my arm stood up as she said the words that I had been craving to hear "Welcome to Starbucks, anything pumpkin I can get you today?" I un-bit my bottom lip, let out a long sigh of relief, and responded "Yes... yes, please"

28

12

243

Snow

@_sn0ww

5 years

I'm honored to be in the #TribeofHackers Red Team book. And I only dropped the f bomb once 😅

14

9

241

Snow

@_sn0ww

5 years

No matter how old I am my mom always worries about me, especially when I travel. I find it adorable, yet ironic, when she asks me things like "Did you break into the building, sweetie? And did you make it back to your hotel room safely?"

14

3

237

Snow

@_sn0ww

5 years

This good boy tho

22

6

237

Snow

@_sn0ww

6 years

Don't forget to add crazy girlfriends to your threat model..

15

70

231

Snow

@_sn0ww

6 years

My biggest accomplishment of 2018... Not getting arrested ✔️

17

23

229

Snow

@_sn0ww

4 years

You ever read someones shit and see through how much they have no idea what they are talking about? But people buy into it because they have a fancy title 🙃

35

13

233

Snow

@_sn0ww

7 years

This picture is everything.

10

54

235

Snow

@_sn0ww

4 years

Hi. You rock. That is all.

24

232

Snow

@_sn0ww

5 years

My grandpa passed away right before Christmas. He left a message to myself, siblings, and cousins. The message was around amore. He explained how no one was perfect but he hoped we'd always love one another. I don't have a resolution for 2020, I hope to focus on loving more.

36

3

231

Snow

@_sn0ww

5 years

It's officially over. Multiple students successfully gained unauthorized access and two were able to complete the objective 😭 I love the tenacity my students have! Very thankful for our client who allowed the students to test their physical security and staff.

Snow

@_sn0ww

5 years

#FSSE students just got assigned a real physical assessment. They met with the client to scope the engagement and have 24 hours to achieve their objective 😅🤞

2

0

58

10

8

234

Snow

@_sn0ww

5 years

😊😚😉

28

29

227

Snow

@_sn0ww

5 years

🎃 Halloween Phishing Ideas 🎣 📧 Office Halloween potluck. Please view the attached flyer to see what you've been assigned to bring. 📧 $company Halloween costume dress code. Picture examples of what is and isn't acceptable. 📧 Halloween party volunteers needed. Signup now!

10

50

226