Warehouses Impacting Methods


Warehouse Operations That Impact Certain Methods

In today's world of the sophisticated type of human hacking known as "company manipulation and exploitation", social engineers use their skillset to penetrate the defence of customer service reps to perform actions that they're not supposed to do - specifically deceive them to credit their account at the company's expense, or dispatch a replacement Item at no extra cost. In order to get the job done, there's a vital element called a "method" that must effectively be put Into practice with each and every attack vector, otherwise the SE cannot and will not make a start.

The good thing about this kind of social engineering, Is the fact that there are quite a number of traditional methods to choose from, and depending on the nature of the product such as Its weight, size & packaging, you'll find there'll be at least one suitable method at your disposal. And If you're struggling to locate one perhaps due to Inexperience, Indecisiveness or lack of awareness, the good ol' DNA (Did Not Arrive) comes to the rescue - which Is compatible with almost every Item of reasonable size/dimensions. 

What you've just read, Is based on Ideal circumstances when hitting online stores to the likes of Nike, Adidas, GoPro, Amazon, Farfetch, John Lewis, etc, but If you've been SEing for many years to date, you'd be well aware that complications WILL be experienced every so often. As such, you can take as much time as needed to prepare the attack within your local environment by leaving very little to no room for error, however you have no control of the "measures some companies have Implemented In their warehouse", thereby It Inevitably has a huge Impact on a few methods - many resulting In the SE prematurely failing.

What I'm referring to, Is stores that have "CCTV cameras" actively monitoring their movement of stock, as well as others that "check their goods during packing", and If both of those setups are unbeknownst to you, It may (and not will) ultimately put an end to three commonly used methods - namely the "missing Item", the "partial" and the "wrong Item received".

As a result, It's crucial to Identify whether companies function In the above-mentioned fashion, Inclusive of having the ability to circumvent their operations, and that's where I come In. I've discussed all that and more In the topics below, but first and foremost, It's paramount to have a clear understanding of the three methods that are heavily affected, hence you'll attain the knowledge to effectively formulate and execute them against your target. Okay, so without further delay, let's begin with the "missing Item method".

The Missing Item Method

As Its name Implies, the "missing Item method" Is used to say that the Item ordered from an online store, was missing from the package/box when the carrier driver dropped It off to your home, drop house, or any other location used to accept deliveries. Naturally, you did receive It, but you're stating otherwise for SEing purposes. Here's an example of how It works. You've purchased a pair of 3rd Generation AirPods from Amazon, and the entire weight (charging case and each AirPod) Is 46 grams. Around 20 minutes after the carrier handed over the package, you've called the rep and Informed him that "the AirPods and the charging case were not In the box".

Now unless the rep/agent Is brain-dead and approves the claim on the spot, there's every chance the company will open an Investigation, and liaise with the carrier who serviced your delivery. What they explicitly check, Is the "weight" recorded at the carrier's weighing facilities - to establish If the AirPods were enclosed In the box. But given they're as light as a feather, they bypassed detection, therefore there was "no evidence to suggest they were In the box", and the claim was finalized In your favor.      

As you can see, the missing Item method's success Is determined by the product weight, so It's of the utmost Importance to SE goods that are extremely light. So what's a safe weight to work with, you ask? As a rule of thumb, I always recommend not to exceed "120 grams", and that's pushing It to Its absolute limit. If you don't go over that (120 gram) figure, the majority of SEs will result In a favorable outcome. Notice how I've quoted "no evidence to suggest they were In the box" In the paragraph above? That's because It's the approach you'll be using to circumvent CCTV cameras, which I've covered towards the end of this article. Next, we'll have a look at the "partial method".

The Partial Method

Given you've just read about the missing Item method, you'll have no problem relating to what the "partial method" entails, for the fact that It's based on a similar concept, but with a slight variation In the way It's executed. Also known as "partial", this method pertains to ordering a bunch of Items, and then claiming It was "partially filled" when you received It. In other words and as an example, 5 Items were purchased, but only 3 or 4 of those Items were received. Essentially one or two were missing - depending on the amount you choose to SE.

It's performed almost the same as the missing Item method, but Instead of buying one product and SEing that alone, you'd purchase "multiple Items on the same shipment", and then claim one or more were not In the package/box when you opened It. For Instance, let's say an order was placed for 6 Items In total, two of which are Ray-Ban Justin Rectangular Sunglasses with a weight of 29 grams each - these are the Items that will be SEd, both pairs of sunglasses. After the delivery arrived, the company was contacted and told that the sunglasses were not In the package. The rest of the Items were there.

As expected, an Investigation was opened to see why there was a discrepancy with the dispatched and received goods. Due to both pairs of sunglasses weighing next to nothing, the claim specialist team could not pinpoint If there was a variance In weight with the entire package, thus their findings of the Investigation was Inconclusive. As a result, there was no proof to decline the claim, and a refund was Issued shortly after. But what If the storeman checked the sunglasses (or any product you're SEing) prior to sealing/taping the box? Simply refer to the last topic for a full explanation on how It should be handled.  

The Wrong Item Received Method

The biggest advantage of the "wrong Item received method" Is Its versatility, meaning It's compatible with every company that has a warehouse full of stock. Unless you're social engineering a car (so to speak!), there's almost no restrictions with the type of product to be SEd, therefore It can be used with just about every online retailer. I'll elaborate on the method's usage, In a very simplistic manner. After you bought an Item and It was delivered to your home, you'd get In touch with the representative and tell him that the package contained something different to what was originally ordered.

Evidently, nothing of the sort happened, you're just saying It did to SE the company. Before going ahead with the method Itself, you first need to "buy the wrong Item that you're pretending to have received" - for the reason that the rep/agent will ask you to send It back, and a refund/replacement for the "original Item purchased" will only be processed when they have the wrong Item In their possession. Also, the wrong Item must be bought on an unrelated account, be of similar weight  to the one you're SEing, and sent to a different address. To make It easy to follow, I've broken down the procedure In chronological order as per below.

  1. Buy the Item you're planning to SE
  2. Purchase the wrong Item from the same company on a different account
  3. Be sure the wrong Item weighs roughly the same as the SE Item
  4. Have the wrong Item sent to another address
  5. When the package arrives (with the "SE Item") contact the rep/agent
  6. Inform him that upon opening the package, a different Item was enclosed 
  7. The rep will ask to return the Item that was (apparently) sent by mistake
  8. Send back the wrong Item that was previously purchased In step 2 above
  9. When they receive the wrong Item, It will be scanned and put back Into stock
  10. A refund/replacement will then be Issued for the SE product

If you've followed all the above steps carefully, It's pretty simple to grasp how the wrong Item received method works but as you're no doubt aware by now, there are a couple of warehouse Implementations that not only affect this method, but also negatively Impact the other two methods that you've had the pleasure of reading. What I'm talking about, of course, Is "CCTV camera monitoring" and "goods checked during packing", so let's rip Into each one starting with the former.   

CCTV Cameras Monitoring The Warehouse

Before I begin, I'd like to point out that due to the nature of warehouse logistics, Inventory management, racking systems & shelving, and particularly packing benches & procedures, It's way beyond the scope of this tutorial to cater for every environment. What I will do, Is give you a general and very accurate example of the way "CCTV cameras" are utilized In modern warehousing during the packing process, as well as how they affect your SE to the point of failure. I'll then show you how to circumvent the cameras In the next subtopic. 

Moving forward, once you've placed your order, the storeman will be given a picking slip with descriptions and quantities for each product, and will pick the Items from their respective locations In the shelf/racking. He will then place the box on a conveyor belt, where the "packers" are standing by to receive It. It's at this stage, when all the action happens. Right above each packing table are overhead CCTV cameras Installed, which record precisely "how the Items are packed In each box" - by their description and quantity.

Now we'll say you're SEing a sweater, that comes In clear packaging using "the wrong Item received method". After telling the company an Incorrect Item was received, an Investigation was opened to try and Identify where the error occurred. Behind the scenes, they referred to their CCTV footage, and It clearly showed your sweater was In fact correctly packed and dispatched, hence your claim was declined. 

If you have no Idea the company has cameras up and running, your SE will miserably fail. That being said, there Is a strategic way  to render the footage Inconclusive ONLY with the "missing Item" and the "wrong Item received". As for the partial, because you're SEing the entire goods (box & packaging or otherwise) avoid using It when cameras are In place. You'll see why In a couple of minutes or so. In terms of bypassing CCTV with the other two methods, check out the following guide. 

How To Circumvent CCTV Cameras

I'd like to reiterate, that this only pertains to the missing Item and the wrong Item received method, so be sure to make a mental note of It. Okay, Irrespective of the circumstances Involved, there's always a way to manipulate a given situation or event, and circumventing CCTV camera footage Is certainly no exception as follows. For this to work, "the Item must be enclosed In a box", and It's vital that the product cannot be viewed externally without opening It. That Is, the box Itself, cannot have any type of clear film that exposes Its contents, thus It must be fully covered In cardboard on all six sides.

For Instance, a SanDisk 1TB Extreme Portable SSD, comes In Its factory state without a window (film) on any side of the box - It's only wrapped In cardboard, which Is Ideal to bypass CCTV detection. How so, you ask? Well, think about It logically for a minute. Cameras are not able to see what's Inside the box (they're not X-ray machines), therefore there's no way the footage can conclude your Item was In the box when It was packed at the company's warehouse. So, when using the missing Item and the wrong Item received method, just say that "upon opening the box" It was empty, or a different Item was Inside -  depending on which of the two methods you've selected.  

Goods Checked At The Time Of Packing

Prior to formulating the missing Item, partial and the wrong Item received method against the product(s) you're planning to SE, It's Imperative to "research the company's warehouse operations" - with the objective of Identifying their picking & packing procedures. This will allow you to establish whether or not the above methods will be affected and If so, you can make an Informed decision with the type of strategy to use with your attack vector. Put simply, the method's execution will be based on how the warehouse team picks & packs their orders

So why must researching be performed on a store that you've never social engineered? Well, unbeknownst to many SE'ers, various companies have trained their staff to actually "check goods as they're placing them In the box/package" before taping It up, and sending It off to the buyer. For example, I can confidently say that a UK sunglasses and watch retailer named Shade Station operates by picking their stock, "opening the sunglasses case to make sure they're Inside", and then packs and sends It to the customer. Other stores with a similar setup, also work In the same fashion.

It's a huge Issue that can "potentially" put an end to the missing Item, partial and the wrong Item received method. And If you plan on saying your product was missing or they shipped something Incorrectly, think again - they'll send you CCTV footage showing your Item was checked and packed In full! Notice I've quoted "potentially" just above? The reason being, Is that It's a possibility and not a certainty, but only when using a very effective technique to deem their warehouse packing systems useless, which brings me to the final part of this article. 

How To Deem Warehouse Packing Procedures Useless

What you're about to read, also applies to rendering CCTV cameras futile, so keep It In mind along with (obviously) the title of this topic when hitting any company that uses a carrier to service their deliveries. Also, for this methodology to work, the carrier must be responsible for loss of goods In transit, so research their terms and conditions prior to putting It Into practice. Alright, the Intention of this approach Is to make It seem as though "the carrier driver, or whoever else handled your package", tampered with It during shipment.    

As a result, your Item was stolen "just before" the package was dropped off at your address. So even If the company cross-checks their camera footage, or questions their storeman who packed your order, It's pretty much pointless. Why? Because "your Item was (seemingly) stolen AFTER It was weighed, and left the carrier's depot" whilst being delivered to you, so there's practically no way the representative can prove you received It.

Having said that, you will Inevitably experience reps opposing your claim, on the grounds of CCTV and/or packers confirming the product was In the package when It left their warehouse, and when It happens, you'd need to tackle It effectively by using the following course of action. Tell the rep/agent to provide photographic evidence of the package condition "at the time It was delivered to your address"

Moreover, the photos must contain every angle of the package, and be clearly visible to the naked eye. I can assure you there Is absolutely no way to fulfil this type of request! So, no matter how many times they refuse to comply, remain adamant about getting the evidence In the manner I've described. All In all, they cannot meet your demands, which gives you the upper hand to have your refund or replacement approved.  

In Conclusion

Many social engineers who use the "missing Item", "partial" and the "wrong Item received method", have no knowledge of the Importance to establish If CCTV cameras are In place, and to also Identify whether companies physically check orders as they're being packed. And the only time they've found out about It, Is when the representative emailed them CCTV footage demonstrating the goods were picked, packed and dispatched correctly. 

That's what prompted me to write this article - to give you the knowledge and expertise to not only understand how a given warehouse operates with the aforementioned strategies, but to also bypass their procedures, thus you're now In a position to use the above methods with confidence and precision. In closing, If you apply what you've learned In today's tutorial, there's every reason why your SEs will work to your advantage a lot more often than not.