Social Engineering: Using a USB that has contains malicious softwareBy: Ashley Peer
Title Page
שקופית: 2
Tina (hacker) gives her co-worker, Jeff, a USB drive she claims she found to check out.
Hey Jeff. I found a USB drive on my desk. Think we can check it out on your computer?
Sure. Why not. I'm sure it wont hurt anything.
Slide 1
שקופית: 3
When Jeff inserts the USB into his computer, he discovers it has been infected by malicious software.
BLUE SCREEN OF DEATHVIRUSVIRUSVIRUSBLUE SCREEN OF DEATH
WHAT HAVE I DONE.......
Slide 2
שקופית: 4
The security team has informed Jeff to undergo mandatory training. The training covers the effects of malicious USB usage in the workplace.
Plugging an unknown USB into a computer can result in several forms of cyberattacks. The malicious USB could infect the computer with viruses, malware, or spyware. Hackers infect USB drives with a virus or Trojan that, when run, will provide hackers access to logins, passwords, and information on the user's computer or network. That includes USB sticks, external hard drives, smartphones and tablets.
I will go over your mandatory training. Please read the screen.
Slide 3
שקופית: 5
After the training, Jeff explained the measures of protection that he had learned.
- Install and update anti-malware software.- Implement a strict policy on the use of USB devices.- Have an Endpoint protection solution and disable Autorun on your machine.
Slide 4
שקופית: 6
Tina was the hacker within the company. She was caught and will spend a long time in jail.
And I would have gotten away with it too, if it was not for you meddling security team!