First-Person Account of a Social Engineering Attack 347
darkreadingman writes, "A penetration tester tells how he broke into a bank's network dressed as a copier repairman. Some good lessons here — many companies spend millions on network security, but don't teach their employees how to challenge a stranger in the building. Social engineering at the company site can be one of the most difficult attacks to defend against." From the article: "Before departing scenes like these, we try to document the effort and provide proof of our success. I usually leave something behind and then contact the person who hired me and direct them to the mark. In this case I wrote his password on a ream of paper and tucked it under the machine."
Hmm... (Score:5, Funny)
Geez (Score:1, Funny)
penetration tester (Score:2, Funny)
In the words of the Paranoia RPG (Score:4, Funny)
1 ream = 500 sheets (Score:5, Funny)
That seems like an awful lot of effort, when you could just write it on one sheet.
Re:Look under your keyboard... (Score:5, Funny)
Man I Wish... (Score:3, Funny)
ObSneakers (Score:5, Funny)
Why not a male model? (Score:2, Funny)
Re:Hmm... (Score:5, Funny)
Because you don't get karma for Funny moderations any more, so some moderators like to throw in an Insightful moderation for funny comments.
Re:penetration tester (Score:2, Funny)
Re:Yikes! So much effort! (Score:1, Funny)
Re:For the love of all things holy (Score:1, Funny)
Re:Yikes! So much effort! (Score:5, Funny)
"Are you sure you want to replace 'Teh Money.xls', size $13.28, modified 11/21/2006, with 'Teh Money.xls', size $1,000,000.00, modified 11/30/2006? [OK] [Cancel]"
Re:Backwords (Score:5, Funny)
Re:True story. (Score:3, Funny)
Re:teach employees? (Score:1, Funny)
Re:Yikes! So much effort! (Score:4, Funny)
Or, transfer it into your own, separate account on the same bank, then use Log Modifier to change the destination account in the transaction record to someone you hate (or someone you're being paid to discredit), and Log Deleter to delete the record on your end. Disconnect before they trace you, and BOOM! Watch your Uplink rating smash through the roof...
You'll probably need a level 5 Firewall Disable (or Firewall Bypass) and version 3 of Decypher. And don't try to hack into the Uplink Corporation's bank; yours is the only account.
Wait, we are talking about Uplink, right?
-:sigma.SB
Re:And why is it that way? (Score:3, Funny)
Re:Yikes! So much effort! (Score:2, Funny)
Damn. What a giveaway. If you see two guys walking into a building with that you know something bad is about to go down.
Dont they show Die Hard in the training inductions?
Re:Hmm... (Score:5, Funny)
Re:And why is it that way? (Score:2, Funny)
Re:Hmm... (Score:4, Funny)
Re:And why is it that way? (Score:3, Funny)
Re:Man I Wish... (Score:5, Funny)