This chapter was about social engineering, physical security, and countermeasures and protection.
Social Engineering
- Foot-printing is like stalking, but in social engineering.
- Pretexting is a made up situation to get someone to give information or do something.
- Elicitation is a way to get information from someone with alerting them.
- Preloading is influencing someone's thoughts, emotions, or opinions before something happens.
- Spim is spam, but sent through an instant message.
Steps in Social Engineering
- Research
- The attacker starts gathering information about the company they will attack. Dumpster diving, company tours, browsing the company's websites, etc.
- Development Phase
- This is when the attacker will select targets within the company and form a relationship with them.
- Exploitation
- This is when the attacker takes advantage of the relationships made to get information.
Other Social Engineering Techniques
- Shoulder Surfing and Eavesdropping
- USB flash drives and keylogging
- Spam and Spim
- Hoax
- When an email or message is displayed on the computer alerting you to a virus that has been downloaded. Viruses don't want to be found, so this is a dead giveaway.
Types of Attackers
- Insiders
- Hackers
- Hacktivist, script kiddies, white hat, black hat, gray hat, cyber criminal
Types of Motivation Techniques
- Authority
- Social Proof
- Scarcity
- Likeability
- Urgency
- Common ground and shared interest
Social Engineering Techniques
- Opportunistic attack
- Motivated by making quick money, so will jump in and out without covering their tracks.
- Target Attack
- Much more dangerous. The attacking entity uses unknown exploits to expose information and covers their tracks when done.
- Elicitation
- Getting information from someone without them knowing.
- Pharming is when an attacker uses malicious programs on a targets computer so that any URL typed in redirects traffic to the attackers malicious website.
- DNS cache poisoning is when the attacker attacks the DNS server. The attacker then changes the target's website IP address to a fake website.
- Host file modification is when the attacker sends malicious files in an email attachment. These files change the local host files on the PC. These altered host files automatically redirect traffic to the attackers malicious website.
Physical Security
- NIST: An institute that standardizes security controls and assessment procedures.
- Bump Key is cut to the number nine position with some of the front and shank removed.
- Scrubbing is a lock-picking method that is running a pick over all the pins with careful pressure.
- Lock shim is a thin and stiff piece of metal used to open a padlock.
Countermeasures and Protection
- Bollard is a physical barrier to deter intruders.
- Strip-Cut shredder cuts paper into long, thin strips
- Crosscut shredder cuts paper vertically and horizontally, making confetti
- Full backup backs up every single piece of an organizations data
- Incremental backup backs up changes since the last full or incremental backup
- Differential backup backs up any changes since the full backup
Article
This was about stolen health information which led to theft of member's PII. Someone broke into a vendor of Health Share of Oregon and stole a laptop. Medicaid member data was exposed. It included names, addresses, phone numbers, dates of birth, social security numbers, and Medicaid ID numbers. They have not caught the burglar as of yet.
https://www.zdnet.com/article/health-share-of-oregon-discloses-data-breach-theft-of-member-pii/
