Dr Anton Chuvakin Blog (Original)

Security writing since the mid-2000s. New posts are mirrored from Anton on Security on Medium.

Social Engineering + USB Flash Drive = Dynamity Penetration!

By Anton Chuvakin
This penetration method did impress me a lot! Get some USB drives, plan Trojans, enable autorun and scatter them where employeer can find them - next day you are an "insider" :-)

Dark Reading - Host security - Social Engineering, the USB Way - Security: "Of the 20 USB drives we
planted, 15 were found by employees, and all had been plugged into company computers. "

New posts appear first on Anton on Security on Medium. This blog keeps a copy, plus the archive going back to the mid-2000s.

Comments

Anonymous said…
The one part that gets me is the "enable autorun" part...how is that done, if it's not enabled by default?

Harlan
http://windowsir.blogspot.com
4:29 AM
Anton Chuvakin said…
Hmmm, I guess I goofed up; I suspect the original info was "have it already enabled"

I am not aware of any way to enable autorun FROM the removable media....
11:34 PM
Post a Comment