Social Engineering, the USB Way

Status
Not open for further replies.

office politics

It's all just 1s and 0s
Messages
6,555
Location
in the lab
Social Engineering, the USB Way

by Steve Stasiukonis is VP and founder of Secure Network Technologies Inc. Special to Dark Reading

JUNE 7, 2006 | We recently got hired by a credit union to assess the security of its network. The client asked that we really push hard on the social engineering button. In the past, they'd had problems with employees sharing passwords and giving up information easily. Leveraging our effort in the report was a way to drive the message home to the employees.

The client also indicated that USB drives were a concern, since they were an easy way for employees to steal information, as well as bring in potential vulnerabilities such as viruses and Trojans. Several other clients have raised the same concern, yet few have done much to protect themselves from a rogue USB drive plugging into their network. I wanted to see if we could tempt someone into plugging one into their employer's network.

follow link above for more
 

aspire

The Water Cooling Guru
Messages
5,308
Location
United States
HAHAH, thats amazing!

I love the way in this case, the phrase curiosity killed the cat, is pretty much true. Without any killing though...

o_O

overall, well worth the 2 minutes it took me to read :p
 

Gollum

Solid State Member
Messages
20
lol thats quite funny... I have to admit that if I found one of the USB flash drives that I would have to plug it in and read the contents.
 

b0dge

Hiphopapotamus.
Messages
557
Location
Location: Posts: 61,784
That is very clever. But surely, you find a usb stick... Yes, you'd check what was on it, but wouldn't you scan the contents first? I mean if it's owner was stupid enough to leave it in the car park, why would they be clever enough to have virus protection? Maybe I'm just talking with the benefit of hindsight having read the article, but if i wouldn't have scanned the contents before reading it, I will now!!
 

goldraine

Solid State Member
Messages
12
 
Status
Not open for further replies.
Top