Here is another example:
Let's say we have a
large company , attackers need to hack them . BlackHats understand that: it takes a long time to look for vulnerabilities, and they want to make money on the hack in a relatively short period of time.
That is why they decide to
go in through employees, i.e. to break into their pc and get into the network of the company, or to install a killer virus or key logger to gather passwords and thus acquire information they need.
There are a number of ways they can do this. For example: a
highly targeted phishing/attack.
First, they look for an employee, to whom the phishers will send the virus, then they analyze the information about this person (using various OSINT technologies), and then they write a phishing post. And sent to him (them) . Or he collects a unique dictionary for the brute force, based on the interests of the person, etc., and cracking his computer using brute force passwords.Or more
broadly targeted phishing/hacking.
Where attackers either write a phishing post without collecting information and send it to many employees of the company at once. Or just brute-force passwords from many accounts in it using regular dictionaries.
There is also a method when an intruder analyzes a company, its way of working, employees, and so on. And then they pretend to work there (to crack it later). Although they can really get a job at this company.
BlackHats can also pay someone who is already working in the company, thereby compromising them and gaining access.🩸
In any case, when the intruders are in the system, it is much easier for them to hack into the company.
Once they are in the company system, attackers can use
malware🦠 for example to infect and collect the data they need. I would like to give another example of a social engineering attack
We have a
large chain of phone stores.
Attackers want to hack into their server and encrypt the data so they can demand a ransom .
They need to get into the server .What should they do? ("Dora the explorer help the attackers find a way to hack someone else's server")🙃
For starters, the attackers decide "the company is quite large, it will take "more than a week to hack it using normal methods(pen-testing and vulnerability searching). "" 🫥
So they decide, "it's better to hack the company through employees."
The company employs Ben, he is not very familiar with cyber security and may be a good target for the hackers .The intruders are
looking for information (everything they can about the company, employees, etc) on one of the job search sites they see Ben , he seems like a good target to them . Using various osint methods they analyсe what might be of interest to him and
compose a phishing email. They send it to Ben's work email account (it is important because they need to infect his work PC). They attach a pdf with the phishing e-mail, they put the malware in it 🦠 and send it to Ben.
He finds it interesting, Ben clicks on the file, it downloads, and the virus infects him and the PC.
Then the intruders gather the information they want with the virus 🌡 .
As we see, cybercriminals often exploit vulnerabilities in employees, rather than in the services themselves. So be vigilant and do not fall for phishing.🪄And at this point I think we should finish the introductory part.
I hope you had fun reading it. In the next posts in this series will be more of those materials, as well as talk about forensics and methods of protection against attacks. ✨
Thank you for reading❤️
Remember: If you only see the Cheshire cat's smile, it does not mean that he does not see you at all😺🎩
#network #wifi #attackers #virus #social_engineering #pentest #attacks #scanners