June 8, 2006
Thumb Drives for Social Engineering
A group of penetration testers used USB “Thumb” Drives to social engineer there way into a credit union:
After about three days, we figured we had collected enough data. When I started to review our findings, I was amazed at the results. Of the 20 USB drives we planted, 15 were found by employees, and all had been plugged into company computers.
Combined with 25 million identities lost on a portable hard drive, may be it’s time for some good controls around our USB ports.
Social Engineering, the USB Way [TechWeb / DarkReading]
