How to Make Social Engineering Unprofitable
Summary: A Hacker News piece by Doppel's Josh Bartolomie argues that social engineering is now an industrialized deception economy with customer acquisition costs and ROI targets, and that generative AI and automated orchestration have cut the cost of producing a convincing lure by 95 percent. The article cites a median time to click a lure of 21 seconds and proposes poisoning attackers' OSINT data, dragging their AI bots into compute-heavy honeypot conversations, and feeding false validation signals to their telemetry.
What you should know: With a 21-second median time to click, people are not a control you can tune, and the article's own measure of success is not alerts blocked but how much attacker time and compute you burn. The stake is whether targeting your organization stays profitable: if it does, the same automated pipeline that costs pennies per lure will keep coming back.
Read the original at The Hacker News ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026