Spear phishing the White House. Twice.

To me it seemed the most natural thing in the world. That once I’d concluded my pranking spree on Wall Street; and in lieu of a reply from Fort Knox (seriously); I would turn my sights towards email’s golden goose egg; the White House.

An iconic symbol of global dominance and security; I reasoned that beneath the veneer of dusty traditions and gold lame curtains there was going to be some serious fricken tech, flexing away behind the scenes… I mean these guys have alien technology, don’t they? Let’s see if aliens have solved phishing…

Notes: Tom was a similar target choice to Dr Ian Levy; Technical Director at the NCSC. Not an apples v apples comparison; but they both shared the broad brushstrokes of being high up the cyber hierarchy in their respective countries, and would have a saturation of email threat awareness. Ian actually saw through my attempt to prank him (Damn you Ian haha) – out of habit he checked a link I sent out and saw the redirect from mail.com. He asked me to collaborate on a blog article with him about the experience from both the victim’s and attacker’s perspective; you can read that here.


Target 1: Tom Bossert
Homeland Security Advisor to President Trump


From: Jared Kushner Me
Sent: Thursday, July 27, 2017
To: Tom Bossert
Subject: August 26th

Tom, we are arranging a bit of a soirée towards the end of August.

It would be great if you could make it, I promise food of at least comparable quality to that which we ate in Iraq!

Should be a great evening.
Jared

Sent from my iPad


From: Tom Bossert EOP/WHO
Sent: Friday, July 28, 2017
To: Jared KushnerMe
Subject: August 26th

Thanks, Jared. With a promise like that, I can’t refuse. Also, if you ever need it, my personal email is [ REDACTED ].

-Tom

Sent from my iPhone

Notes: Short but very sweet; I quickly pulled over the car (safely) once I saw Tom’s name on my lock screen. I got the impression Tom was very busy, so I didn’t take his brief reply to heart. A real bonus being gifted his personal email address, that should make arranging the party tons easier. My theory that it doesn’t matter how much awareness you have; you can still get ‘got’, firms up off the back of this experiment.


Anthony Scaramucci arrived at the White House like he was filming a reboot to Top Gun. All mirrored aviators and swagger. Sadly Anthony got fired a few days after I had these exchanges with him.

Target 2: Anthony Scaramucci
White House Communications Director
(Act 1 – I’m Jon Huntsman Jr)

From: Jon Huntsman JrMe
Sent: Friday, July 28, 2017
To: Anthony Scaramucci
Subject: I for one appreciate your swagger, Anthony

You’re a breath of much-needed fresh air.

Bravo.

Jon Huntsman

Sent from my iPhone


From: Anthony Scaramucci
Sent: Friday, July 28, 2017
To: Jon Huntsman JrMe

Sent from my iPhone


From: Jon Huntsman Jr
Sent: Friday, July 28, 2017
To: Anthony Scaramucci

My decryption app isn’t working – that came through blank Anthony

Also, please make a note of my personal email address – I don’t like to operate out in the open, if you get what I mean.

Jon


From: Jon Huntsman Jr
Sent: Friday, July 28, 2017
To: Anthony ScaramucciMe

Don’t know what’s fucking up with my email, it’s why I use my gmail account so often.

Anyway, it’s refreshing to see someone who takes no shit and pulls no punches.

There’s far too many people hiding their ineptitude with silence and a smile. In my humble opinion.

Jon

Sent from my iPhone


From: Anthony Scaramucci
Sent: Friday, July 28, 2017
To: Jon Huntsman JrMe

I love you for saying the truth.

Sent from my iPhone


From: Jon Huntsman JrMe
Sent: Friday, July 28, 2017
To: Anthony Scaramucci

Who’s head should roll first?

Maybe I can help things along somewhat

Sent from my iPhone


From: Anthony Scaramucci
Sent: Friday, July 28, 2017
To: Jon Huntsman JrMe

Both of them

Sent from my iPhone


From: Jon Huntsman JrMe
Sent: Friday, July 28, 2017
To: Anthony Scaramucci

Personally, I’d get rid of dumb and dumber, the Trump sons. Seeing them posing with various bits of animal they’ve shot is the biggest overcompensation for underdeveloped testicles I’ve ever had the misfortune to see. 

If they fell into a barrel of tits, they’d still come out sucking each other’s thumb.

In my humble, Anthony.


From: Jon Huntsman JrMe
Sent: Saturday, July 29, 2017
To: Anthony Scaramucci

I don’t agree with anything I’m reading about the harassment of your family, I was sad to read that today.

Jon


Anthony Scarramucci (Act 2 – I’m Reince)


From: Reince PriebusMe
Sent: Saturday, July 29, 2017
To: Anthony Scaramucci
Subject: As a final word

I had promised myself I would leave my hands mud free, but after reading your tweet today which stated how; ‘soon we will learn who in the media who has class, and who hasn’t’, has pushed me to this. That tweet was breathtakingly hypocritical, even for you.

At no stage have you acted in a way that’s even remotely classy, yet you believe that’s the standard by which everyone should behave towards you? Aro

General Kelly will do a fine job. I’ll even admit he will do a better job than me.

But the way in which that transition has come about has been diabolical. And hurtful.

I don’t expect a reply.

Best

Reince

Sent from my iPhone


From: Anthony Scaramucci EOP/WHO
Sent: Saturday, July 29, 2017
To: Reince PriebusMe

You know what you did. We all do. Even today. But rest assured we were prepared. A Man would apologize.

Sent from my iPhone


From: Reince PriebusMe
Sent: Saturday, July 29, 2017
To: Anthony Scaramucci

I can’t believe you are questioning my ethics! The so called ‘Mooch’, who can’t even manage his first week in the White House without leaving upset in his wake.

I have nothing to apologize for

Sent from my iPhone


From: Anthony Scaramucci EOP/WHO
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

Read Shakespeare. Particularly Othello. You are right there. My family is fine by the way and will thrive. I know what you did.

No more replies from me.

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday, July 30, 2017
To: Anthony Scaramucci EOP/WHO

You’re well suited to your zero dollar pay scale. You know nothing of me and my work, it’s beyond your remit; don’t try to insinuate you do. It’s pathetic. Keep spell checking your press releases, Anthony.

It’s me that will be thriving.


I think I must have spooked the Mooch as Reince… He has just emailed Huntsman Jr (Err.. Me still)


From: Anthony Scaramucci EOP/WHO
Sent: Saturday, July 29, 2017
To: Jon Huntsman JrMe

Are you in Moscow now? If not please visit

Sent from my iPhone


From: Jon Huntsman JrMe
Sent: Saturday, July 29, 2017
To: Anthony Scaramucci EOP/WHO

Sorry Anthony – I’m abroad and currently indisposed.

Everything okay?

Sent from my iPhone


From: Anthony Scaramucci EOP/WHO
Sent: Sunday, July 30, 2017
To: Jon Huntsman JrMe

All good. I was going to meet up.

Sent from my iPhone


Who dis?? Arthur who?

Notes: The Reince email address was a day old at best, and I had only reached out to Scaramucci using it. Receiving an email from someone I didn’t know meant my email address had either been directly passed onto Arthur – or – he had been forwarded the chain with Scaramucci from yesterday. Either way, it seemed rude to not reply.


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe
Subject: Apologies

I’m sorry about this morning, Reince. I didn’t think anyone would pick up on anything I said. I’m ashamed of what I did and extend my deep and sincere apologies.

Best. -A.

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday, July 30, 2017
To: Arthur Schwartz

Where did you get my email address from?

And apology accepted, Arthur.

It’s the Mooch I’ll not be apologising too.

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

I get it re: Anthony. And deeply appreciate you accepting my apology. Even my mother called to tell me that she was ashamed of me.

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday, July 30, 2017
To: Arthur Schwartz

Well life is far too short. So whilst there’s love and romance, let’s face the music, and dance.

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

Tapper is saying that “source close to Reince” said that I never apologized and you never accepted my apology. Totally understand if that’s the case but if it’s not, would appreciate it if you could let him know that his source is wrong.

Best always. -A.

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday, July 30, 2017
To: Arthur Schwartz

Sure, I’ll put them straight. Don’t worry be happy.

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

Many thanks, Reince.

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

He’ll just call me a liar again —

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday, July 30, 2017
To: Arthur Schwartz

Feel free to quote me in a tweet to clear things up, if that will help?

“Arthur and I have kissed and made up. As they say in Flashdance; move on, move closer. SPIN.”

It might seem quirky, it quotes a famous quotation of mine regarding putting things behind you.

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

Can you just quote tweet this and say “Apology accepted. Moving on.” Or something like that?

Sent from my iPhone


From: Reince PriebusMe
Sent: Sunday July 30, 2017
To: Arthur Schwartz

I will after you post mine, it means a lot to me personally

Sent from my iPhone


From: Arthur Schwartz
Sent: Sunday, July 30, 2017
To: Reince PriebusMe

So, you’re not Reince, huh? Well played.

Sent from my iPhone


End of White House Prank. Kinda.

So on Sunday 30th July; after being recognised ‘in the wild’ by Jake Tapper (which really impressed me); I packed up my White House project, and sent it to CNN.

Now lets jump forward a little, to September 5th, 2017.

37 days later. I’m curious.

Like most, ahem, security consultants, I was curious whether the findings of my spear-phishing simulation had resulted in any real-world security changes. I certainly had heard nothing from them directly, and had decided against invoicing them.

I guess I could find out… a surprise email gateway inspection.. I’ll use my emailprankster domain this time. Let’s give them a fighting chance, it’s probably going to bounce back anyway.

Notes: I can’t remember exactly why Ty Cobb ended up on my radar; I seem to recall it was a conversation I had with Jeff Jetton that brought it about. I think Ty had made a few outlandish comments about Natasha Bertrand, and I felt that was a little ungentlemanly. Any comments I make about Natasha are just to add some creative sparks in response to Ty’s slanderous comment she appeared or acted ‘drugged up’.


Target 3: Ty Cobb
White House Legal Counsel


From: Dan Scavino Jr <[email protected]>Me
Sent: Tuesday, Sept 5, 2017
To: Ty Cobb EOP/WHO
Subject: Nipping it in the bud

Good evening Ty,

I’ve sent a complaint to twitter about the content that drugged up extremist, Natasha Bertrand, is spouting about your correspondence. 

Things like this on social media die quicker than a Mexican’s hopes of Citizenship, Ha! But I wanted to tick all the boxes.

I presume you’ve had no further contact from Ms Bertrand?

Dan

Sent from my iPhone


From: Ty Cobb EOP/WHO
Sent: Tuesday, Sept 5, 2017
To: Dan Scavino Jr Me

When can we get together?  I have emails saying off the record and two hours of trying to help her. Nutty!  Ty

Sent from my iPhone


From: Dan Scavino JrMe
Sent: Tuesday, Sept 5, 2017
To: Ty Cobb EOP/WHO

We can sit down tomorrow afternoon, if that’s good for you?

What was she pushing for? She has a reputation for being a bit cuckoo

Sent from my iPhone


From: Ty Cobb EOP/WHO
Sent: Tuesday Sept 5, 2017
To: Dan Scavino Jr Me

Deeply grateful!   Any drone time left?

Sent from my iPhone


Let’s drop in on Sarah Sanders as well, she always seems to have an opinion on everything


From: Dan Scavino JrMe
Sent: Tuesday, Sept 5, 2017
To: Sarah Sanders
Subject: Natasha Bertrand

Evening Sarah, long shot – but Natasha Bertrand hasn’t contacted you, has she? I’ve had Ty contact me this evening saying she’s sent him several emails, and is to quote Ty; ‘Insane’


From: Sarah Sanders EOP/WHO
Sent: Tuesday, Sept 5, 2017
To: Dan Scavino JrMe

Not today. Last email was from Friday on an appointment at DOJ.


From: Dan Scavino JrMe
Sent: Tuesday Sept 5, 2017
To: Sarah Sanders

Ah okay, that’s good to hear. He really went off, ending it all half-jokingly asking if we had drone time left. I’ve never heard him so angry.


From: Sarah SandersEOP/WHO
Sent: Tuesday, Sept 5, 2017
To: Dan Scavino JrMe

Yikes! Glad she didn’t reach out to me then.


And now back to Ty….
Let’s give him some good news


From: Dan Scavino JrMe
Sent: Tuesday, Sept 5, 2017
To: Ty Cobb EOP/WHO

I’ve had a response from twitter – apparently Natasha has been warned before, she re-tweeted a gif of Donald Jr fellating a banana (which was deemed indecent – apparently it was photoshopped) So this is all the excuse they need to close her account.

Quite a result!

Dan

Sent from my iPhone


From: Ty Cobb EOP/WHO
Sent: Tuesday, Sept 5, 2017
To: Dan Scavino JrMe

Well done Man!!!  Thanks so much!  Turns out I may be out today but looking forward to thanking you personally!  Ty

Sent from my iPhone


From: Dan Scavino JrMe
Sent: Wednesday, Sept 6, 2017
To: Ty Cobb EOP/WHO

One final thing Ty, I’ve been really worried recently about the whole Russian situation. The White House will be okay, won’t it? I love my job, and the people I work with, I don’t want the dream to end up derailing.

Dan

Sent from my iPhone


From: Ty Cobb EOP/WHO
Sent: Wednesday, Sept 6, 2017
To: Dan Scavino JrMe

I have great confidence there is nothing there implicating the President or the White House.  Manafort and Flynn have issues separate and apart from the WH that will cause the investigation to linger but am hoping we get a clean bill of health soon.  Best, Ty

Sent from iPhone


From: Ty Cobb EOP/WHO
Sent: Wednesday, Sept 6, 2017
To: Dan Scavino JrMe

Felony to impersonate a federal official

Sent from iPhone


From: Dan Scavino JrMe
Sent: Wednesday, Sept 6, 2017
To: Ty Cobb EOP/WHO

Like I give a fucking shit.

The biggest crime is that giant cock in office.

And your gullibility.

Sent from my iPhone


From: Ty Cobb EOP/WHO
Sent: Wednesday, Sept 6, 2017
To: Dan Scavino JrMe

Thanks for the confession and who was being gullible…..

Sent from my iPhone


From: Dan Scavino JrMe
Sent: Wednesday, Sept 6, 2017
To: Ty Cobb EOP/WHO

You want to stand in court going over everything you believed, be my guest.

Sent from my iPhone


/END