Bank Hacking
This is a great story of social engineering, wherein USB drives are “dropped” around a bank and employees pick them up and plug them into bank computers [via Slashdot]. This was done as part of a security audit, and what is particuarly interesting is that the employees knew a security audit was being done and knew that social engineering attacks were going to be attempted. The results: Of the 20 USB drives we planted, 15 were found by employees, and all had been plugged into company computers. The data we obtained helped us to compromise additional systems, and the best … Continue reading Bank Hacking