Smokers undermine information security
Where the smoker - there is an open door. The total ban on smoking in the offices makes nicotine addicted computer people run into the street. The back door is left open to them. According to British experts, social hackers can use this “hole”.
The British consulting company NTA Monitor , which specializes in IT security, conducted an experiment . During this experience, the hacker was able to easily enter the corporate building through the back door, which was left specifically for smokers. Inside the building, a hacker, using social engineering techniques, entered the negotiation room. Staff members of the company held him there and left him alone.
To get into the building, the hacker did not need a pass. He just waited for smokers to stop smoking and then entered through the same door. A few minutes later he was able to connect his laptop to the corporate VoIP-network - right from the meeting room. Fortunately, in this company, the data network was separated from the VoIP network, so unauthorized access caused few problems. In most other companies, a hacker would copy all the necessary data in a few minutes and calmly leave the building.
Roy Hills, CTO of NTA Monitor, puns: “It happened that companies left the back door (backdoor) open in the sense of computer security. Now they literally leave it open to smokers. ” This is especially dangerous due to the fact that hackers are increasingly using social engineering methods to penetrate corporate networks.
')
The specialist stresses that a “hole” in computer security has arisen due to new legislation in the United States and some European countries, which prohibits the creation of smoking areas in office buildings. In July, this law will come into force throughout the UK.
The British consulting company NTA Monitor , which specializes in IT security, conducted an experiment . During this experience, the hacker was able to easily enter the corporate building through the back door, which was left specifically for smokers. Inside the building, a hacker, using social engineering techniques, entered the negotiation room. Staff members of the company held him there and left him alone.
To get into the building, the hacker did not need a pass. He just waited for smokers to stop smoking and then entered through the same door. A few minutes later he was able to connect his laptop to the corporate VoIP-network - right from the meeting room. Fortunately, in this company, the data network was separated from the VoIP network, so unauthorized access caused few problems. In most other companies, a hacker would copy all the necessary data in a few minutes and calmly leave the building.
Roy Hills, CTO of NTA Monitor, puns: “It happened that companies left the back door (backdoor) open in the sense of computer security. Now they literally leave it open to smokers. ” This is especially dangerous due to the fact that hackers are increasingly using social engineering methods to penetrate corporate networks.
')
The specialist stresses that a “hole” in computer security has arisen due to new legislation in the United States and some European countries, which prohibits the creation of smoking areas in office buildings. In July, this law will come into force throughout the UK.
Source: https://habr.com/ru/post/3441/
All Articles