Christopher Hadnagy

{{Short description|American author, hacker, and computer scientist}}

{{Infobox person

| name = Christopher J. Hadnagy

| image = SECTF-GenAlexanderandChrisHadnagy.png

| caption = General Keith Alexander (left) offers Chris Hadnagy the NSA Director's Challenge Coin at DEF CON 20.

| birth_name = Christopher James Hadnagy

| birth_date =

| birth_place =

| occupation = Information technology consultant, author

| organization = Innocent Lives Foundation, Social-Engineer, LLC

| website = {{URL|https://www.social-engineer.com}}

}}

Christopher James Hadnagy is an American author and information technology security consultant. He is recognized for his contributions to the field of social engineering in information security.{{Cite news |last=Hiltner |first=Stephen |date=September 24, 2018 |title=When Reporting on Defcon, Avoid Stereotypes and A.T.M.s |url=https://www.nytimes.com/2018/09/24/insider/covering-hackers-defcon-cybersecurity.html |work=The New York Times}} He established the Innocent Lives Foundation. He contributed to DEF CON and was later permanently banned from it for code of conduct violations.

Career

Hadnagy is the founder and CEO of Social-Engineer LLC, a company specializing in education and training in social engineering.{{Cite web |date=March 16, 2022 |title=Hacking humans: social engineering and the power of influence |url=https://www.abc.net.au/radionational/programs/allinthemind/social-engineering-and-the-psychology-of-influence-repeat/13798344 |access-date=2022-06-23 |website=ABC Radio National |language=en-AU}} He also established Social-Engineer.Org, an IT security education website.{{Cite web |last=Goodchild |first=Joan |date=October 17, 2011 |title=New social engineering poll reveals which scam works better |url=https://www.csoonline.com/article/2138398/new-social-engineering-poll-reveals-which-scam-works-better.html |access-date=2022-06-23 |website=CSO Online |language=en}}

Hadnagy has contributed to the information security industry, including developing a social engineering framework, producing a newsletter, and hosting a podcast focused on the subject.{{Cite news |last=Yadron |first=Danny |date=2015-04-20 |title=The Man Who Hacks Your Employees |url=http://www.wsj.com/articles/the-man-who-hacks-your-people-1429499479 |access-date=2023-11-11 |work=Wall Street Journal |language=en-US |issn=0099-9660}}

He also serves as an adjunct professor at the University of Arizona's Center of Academic Excellence in Cyber Operations, designated by the NSA.{{cite web |title=Faculty |url=https://cyber-operations.azcast.arizona.edu/content/faculty |publisher=The University of Arizona – Center of Academic Excellence}}

In 2019, Vice reported that Hadnagy sold computer software designed for identifying anonymous online child predators to the FBI for $250,000.{{Cite web |last=Cox |first=Joseph |date=2021-03-25 |title=FBI Paid Anti-Child Predator Charity $250,000 for Hacking Tools |url=https://www.vice.com/en/article/fbi-paid-charity-for-hacking-tools-ni/ |access-date=2024-03-17 |website=Vice |language=en}}

= Charitable foundation =

In 2017, Hadnagy founded the Innocent Lives Foundation,{{Cite web |last=Larson |first=Selena |date=2017-08-14 |title=Hacker creates organization to unmask child predators |url=https://money.cnn.com/2017/08/14/technology/business/innocent-lives-foundation-hackers-child-predators/index.html |access-date=2024-03-17 |website=CNNMoney}} dedicated to protecting children from online predators by investigating child exploitation, sexual abuse, trafficking, and the production of child sexual abuse material. The foundation collaborates with information security professionals, uses open-source intelligence (OSINT), and works with law enforcement agencies in the United States, including support from actor Erin Gray{{Cite web |title=Actress Erin Gray talks about The Innocent Lives Foundation - CBS Los Angeles |url=https://www.cbsnews.com/losangeles/video/actress-erin-gray-talks-about-the-innocent-lives-foundation/ |access-date=2023-11-08 |website=www.cbsnews.com |language=en-US}} and the FBI.{{Cite web |last=Cox |first=Joseph |date=2021-03-25 |title=FBI Paid Anti-Child Predator Charity $250,000 for Hacking Tools |url=https://www.vice.com/en/article/fbi-paid-charity-for-hacking-tools-ni/ |access-date=2023-11-08 |website=Vice |language=en}}

= DEF CON =

Hadnagy contributed to DEF CON by helping create a social engineering competition in 2009 and sponsoring one of the first social engineering capture the flag events in 2010.{{Cite news |title=Chris Hadnagy on the Def Con hackers posing as your coworkers |url=https://www.csmonitor.com/World/Passcode/2015/0731/Chris-Hadnagy-on-the-Def-Con-hackers-posing-as-your-coworkers |access-date=2023-11-08 |work=Christian Science Monitor |issn=0882-7729}}{{Cite web |title=DefCon contest to spotlight social engineering |url=https://www.csoonline.com/article/525420/social-engineering-defcon-contest-to-spotlight-social-engineering.html |access-date=2023-11-08 |website=CSO Online |language=en-US}}

Hadnagy was permanently banned from DEF CON in 2022 for code of conduct violations, a decision he publicly disputed.{{cite web |last=Nichols |first=Shaun |date=February 10, 2022 |title=DEF CON bans social engineering expert Chris Hadnagy |url=https://www.techtarget.com/searchsecurity/news/252513274/DEF-CON-bans-social-engineering-expert-Chris-Hadnagy |access-date=May 4, 2022 |website=TechTarget}}{{cite web |title=Post DEF CON 29 |url=https://defcon.org/html/links/dc-transparency.html |access-date=February 10, 2022 |website=DEFCON Transparency Report}} He sued DEF CON for harm to his reputation.{{Cite web |last=Hetzner |first=Christiaan |date=August 19, 2022 |title=Star social engineer dubbed the 'human hacker' sues Def Con after receiving permanent ban |url=https://fortune.com/2022/08/19/christopher-hadnagy-sues-def-con-jeff-moss-over-permanent-ban/ |access-date=2023-01-14 |website=Fortune |language=en}}{{Cite web |last=Faife |first=Corin |date=2022-08-18 |title=Def Con banned a social engineering star — now he's suing |url=https://www.theverge.com/2022/8/18/23311573/chris-hadnagy-social-engineering-def-con-ban-lawsuit-jeff-moss |access-date=2023-01-14 |website=The Verge |language=en-US}}{{Cite web |last=Wright |first=Rob |date=2023-01-16 |title=Judge dismisses Chris Hadnagy lawsuit against DEF CON |url=https://www.techtarget.com/searchsecurity/news/252529227/Judge-dismisses-Chris-Hadnagy-lawsuit-against-DEF-CON |access-date=2023-08-23 |website=TechTarget |language=en}} In February 2025, details of the harassment allegations against him were published when a motion for summary judgment was filed.{{Cite news |title=Harassment allegations against DEF CON veteran detailed in court filing |last=Jones |first=Connor |date=2025-02-25 |url=https://www.theregister.com/2025/02/25/def_con_harassment_allegations/ |access-date=2025-02-26}} In May 2025, the judge dismissed Hadnagy's lawsuit because he could not prove the claims against him were false.{{Cite web |last=Volokh |first=Eugene |date=2025-05-13 |title=Defamation Lawsuit Against Def Con Cybersecurity Conference Dismissed |url=https://reason.com/volokh/2025/05/13/defamation-lawsuit-against-def-con-cybersecurity-conference-dismissed/ |access-date=2025-05-16 |website=Reason.com |language=en-US}}{{Cite news |last=Jones |first=Connor |date=May 16, 2025 |title=Defamation case against DEF CON terminated with prejudice |url=https://www.theregister.com/2025/05/16/def_con_defamation_dismissed/ |access-date=2025-05-31 |work=The Register}}

= BSides Cleveland =

In 2021, Security BSides in Cleveland Ohio featured Hadnagy as an unlisted "special guest" speaker.{{cite web |last= |first= |date=June 20, 2022 |title=Security BSides Response to the BSides Cleveland Incident |url=http://www.securitybsides.com/w/page/149536464/Security%20BSides%20Response%20to%20the%20BSides%20Cleveland%20Incident |access-date=June 23, 2022 |website=Security Bsides}} Controversy surrounding his participation and speaking led to several other speakers withdrawing from the event in the moment of speaking.{{Cite web |date=June 21, 2022 |title=Security BSides commits to greater conference diversity after speaker backlash |url=https://www.itpro.com/security/cyber-security/368327/security-bsides-conference-diversity-after-speaker-backlash |access-date=2022-06-21 |website=IT PRO |language=en}}

Books

Christopher Hadnagy has authored several books on social engineering, including:

  • Social Engineering: The Science of Human Hacking (2018, John Wiley & Sons Inc.) {{ISBN|978-1-119-43338-5}}{{Cite book |last=Hadnagy |first=Christopher |url=https://books.google.com/books?id=nvxfDwAAQBAJ |title=Social Engineering: The Science of Human Hacking |date=July 31, 2018 |publisher=John Wiley & Sons |isbn=978-1-119-43338-5 |language=en}}
  • Unmasking the Social Engineer: The Human Element of Security (2014, John Wiley & Sons, Inc.) {{ISBN|978-1-118-60857-9}}
  • Phishing Dark Waters: The Offensive and Defensive Sides of Malicious E-mails (2015, John Wiley & Sons Inc.), co-authored with Michele Fincher and Robin Dreeke {{ISBN|978-1-118-95847-6}}
  • Social Engineering: The Art of Human Hacking (2010, Wiley Publishing, Inc.) {{ISBN|978-0-470-63953-5}}{{Cite web |last=BillV |date=2018-07-26 |title=Book Review: Social Engineering: The Science of Human Hacking |url=https://securityboulevard.com/2018/07/book-review-social-engineering-the-science-of-human-hacking/ |access-date=2024-03-17 |website=Security Boulevard |language=en-US}}
  • Human Hacking: Win Friends, Influence People, and Leave Them Better Off for Having Met You (2021, Harper Business) {{ISBN|978-0-063-00178-7}}{{cite book |url=https://www.worldcat.org/oclc/1255930084 |title=Human hacking : win friends, influence people, and leave them better off for having met you |oclc=1255930084 |access-date=June 24, 2021 |via=WorldCat.org}}

References

{{reflist}}