Gone in 180 minutes – From social engineering to domain dominance

Speakers

• Hasain Alshakarti

About this session

In just 180 minutes, a determined attacker moved from a convincing social engineering call to full control of a corporate domain. This session unpacks that incident in detail, showing how a blend of human manipulation, overlooked identity gaps, and misconfigured systems opened the door to rapid escalation. We’ll walk through the attack step by step—illustrating the tactics used, the decisions that accelerated compromise, and the warning signs that were missed along the way. Alongside the technical trail, we’ll highlight the organizational lessons: why culture, processes, and training matter just as much as tools. By the end, attendees will walk away with a clear view of how modern attackers operate and concrete actions any team can take to strengthen resilience and shorten response times.