Red Team Social Engineering 2024: Initial Access TTP and project experience of the our team

This presentation will cover the topic of effective techniques, tactics, and procedures (TTP) for initial access and spear phishing vectors based on the project experience of the PT SWARM Red Team operations.
Key topics include:
Payloads and delivery methods: An examination of the most effective payloads and methods of delivering them to users. Special attention will be given to concepts such as HTML/SVG/PDF Smuggling, PDF Luring, DLL Side-Loading, attacks on developers, persistence via COM hijacking and spoofing email domains.
Project case studies: Examples of successful Red Team operations, including specific cases of initial access based on our Red Team projects and experience.
The presentation will provide participants with a deeper understanding of modern targeted phishing techniques and their practical application in real-world Red Team scenarios.