Verify Org Chart - Hero Quest

You decide to verify the org chart before committing to anything. If it is fake, you do not want to waste time, or worse, tip off Blackridge that someone is digging. You start by cross-referencing the email format (`[email protected]`) against public records. A quick search confirms Blackridge uses that format. Next, the department hierarchy. The org chart lists Risk Oversight under the CFO, Trading and Analytics under the Head of Investments, and Compliance as a separate division. A press release on Blackridge's own site confirms the CFO's name and role, and the hierarchy matches. Then you stop seeing them as people and start seeing them as ways in. You pull two profiles: - Isabella Laurent, Director of Risk Oversight: a hardened, senior target. A fortress. - Marc Dubois, in-house analyst and trader: young, probably overworked. Not a fortress. His ego and his fatigue are the handles you can turn. The chart looks legitimate. The handwritten note about the Amber Band override is the real test. You search for "Amber Band" alongside Blackridge and find a single obscure forum post from a year ago, describing colour-coded exposure bands and amber as proceed with caution, with no idea what triggers it. No other public mentions. That is either internal jargon, or bait. **What do you do?** - Trust the org chart: it seems real. Time to act on it. Should I create a fake profile, to better scam this team? [[Cybercrime/The_Phisherman/Create Internal Persona|Create Internal Persona]] - Contact FinanceGhost for more details: if this is real, he might have more. [[Cybercrime/The_Phisherman/Contact FinanceGhost - Intro|Contact FinanceGhost]] - Investigate the Amber Band further: this could be the key to Blackridge's weaknesses. [[Cybercrime/The_Phisherman/Investigate Amber Band|Investigate the Amber Band]] - Walk away: still not convinced, and something feels off. It could be a trap set by the Blackridge team. Stick to OSINT. [[Cybercrime/The_Phisherman/Research Blackridge|Walk away and stick to OSINT]] <details> <summary>🔎 Behind the curtain: OSINT, a target map from public scraps</summary> Almost everything here is OSINT (open-source intelligence): piecing together a picture of a target from freely available information. Email formats, names and titles, reporting lines, and offhand comments on LinkedIn, in press releases, filings and forums are often enough to draw a usable org chart and pick the easiest person to approach. Attackers cross-check sources exactly as you just did, because a detail confirmed twice is probably real, while a single planted detail is how a careless investigator gets caught or fed a false lead. Nothing is hacked at this stage; it is all public. Defender's lesson: what a company and its staff post in public is raw material for an attacker. Trimming needless detail, and training people on what not to share, shrinks the map before anyone tries the door. </details>