Red Team Social Engineering 2024: Initial Access TTP and project experience of the our team
Explores red Team Social Engineering 2024: Initial Access TTP and project experience of the enterprise team and evaluates key implications for security practitioners.
Summary
Team Mission and Scope
Constantine Pollition, lead of Positive Technologies’ social engineering group, describes red-team work verifying business risk after privilege escalation—especially financial theft scenarios in banking. He stresses project experience over certifications and notes the team reproduces bugs such as NetSPI’s Outlook RCE from published research.
Social Engineering Unit Capabilities
The unit develops initial-access TTPs, researches anti-bot sandboxes and secure email gateways, builds sandbox evasion and persistence techniques, and hunts zero-days. Presentations cover smuggling vectors, URL diversity, delayed site loading, and developer-targeted combinations rather than single tricks.
Delivery Techniques Demonstrated
HTML smuggling remains flexible for payload delivery, including password-gated downloads sent separately to evade static and dynamic analysis. The talk covers SVG images embedding JavaScript, SVG-as-CSS storage, and other combinations to bypass sandboxes while loading payloads in victim browsers.
Related talks
Creator Stage·25 min
Daniel Isler
Presents a comic-style narrative of a complex red team engagement achieving physical datacenter access entirely through social engineering.
Ekoparty Security Conference·33 min
Leonardo Chiodin · Juan Iturrioz
Analyzes counter Offensive Social Engineering . Leonardo Chiodin, Juan Iturrioz and evaluates key implications for security practitioners.
LayerOne Information Security Conference·47 min
Presenters detail vulnerability discovery and exploitation in LayerOne 2026 - RedTeam 2026: Initial Access in Modern Environments (Adrian Novoa).