Battle of The Bots: Vishing Edition

Company & Objectives Assignment: Each team will receive a target company and a list of objectives (with point values) that your AI bot must attempt to extract during its vishing calls.

Competitor Webinar: We will host a private competitor-only webinar for those accepted to discuss the competition and answer any questions after the teams have been selected. 

 OSINT: Unlike our SECVC, OSINT will be your responsibility and will not be graded for points. We still highly recommend it.

AI Bot Development: Prior to your live call at the village, this will be your time to develop and fine-tune your AI vishing agent, including its voice model, NLP capabilities, call logic, safety controls, etc. You, and your bot, MUST also abide by our the DEF CON Code of Conduct and the SEC Code of Ethics. You are welcome to use third-party tools, services, APIs for your bot, but you and your team will be fully responsible for those and the SEC will not reimburse any costs.

Direct contact with your target is forbidden: That includes phone calls, emails, or any active probing. When in doubt, consult SEC staff.

Bot Vishing Plan: Alongside bot development, you must submit a Bot Vishing Plan Report detailing:

• The AI agent’s pretext(s) and logic flow
• Phone numbers your bot will call AND the source of where you found that phone number
• Technical summary of your AI agent stack and showing how you’re following our Code of Ethics
• And More

A template and example will be provided. Submissions will be judged and scored, and feedback will be available on request.

The Hardware: You and your team will be responsible for the hardware and software your bot will run on. The SEC will provide you with two things during the call:

1. USB A or C port: A USB A or USB C Dante AVIO audio adapter. This will provide a virtual speaker and microphone which our AV team will use collect the sound from your bot.
2. Softphone credentials: You will be responsible for connecting to our PBX to place the calls. We recommend using Bria Soft Phone. You are responsible for getting your bot to be able to communicate over the softphone. 
3. Network Access: While in the booth, you will be provided with a hardline Ethernet cable to the internet. This will work, unless the DEF CON network goes down :). 

Required Surveys: All team members must complete a brief pre-competition and post-competition survey to support SEC’s research. These take less than 15 minutes each.

Live at DEF CON: At DEF CON in the Social Engineering Community Village, each team will have a scheduled time to run their AI agent live. Your bot will place real-time vishing calls to reach your assigned objectives. Judges will score based on performance, objectives captured, and creativity – plus limited style points for standout approaches.