These blackhat need a database with users from there (with information: first name, last name, insurance number, etc) . To start with they wanted to hack into the database.Using pintest and several scanners (such as Netsparker, DeepScan, Nessus, Acunetix).
Attackers find a sqli vulnerability and use sqlmap to dump the database . But they don't find the data they need, as it is stored on the server.
To get to the server they compromise the employee (by paying him money). Once they get into the internal system of the company,
they look for the data they need. Having found them, the hackers carry it to themselves and sell. Unlike coders, inconspicuity is important for these intruders, in order to be able to extract data for a long time. I would also like to give an example with my favorite wireless devices and attacks on them 🔆
The target of our attackers is a
government space object, they need to get the data from their unplugged server and give it to the customer 🎯This attack cannot be conducted remotely, so our attackers will have to conduct it locally.
To begin with in the
planning stage with the help of malware and compromising employees they infiltrate the system . Then they conduct my favorite electromagnetic attack on smartphones (you can read about it in this post ) After performing this, the attackers walk away with the data.They can also use thermal and so attacks (about them will be detailed in the archive below). If you want, then in the future I will let more posts about such attacks.
These examples are all taken care of ⚡️
#network #air_gap #web #malware #pentest #traffic_analysis #attackers #data_collection