Classic social engineering at it’s best…a professional thief (or thieves) apparently got away with over 2 million in rare art and jewelry. Pretty much sounds like a movie scenario! From the CBC article: “Four hours before the break-in on May 23, two or three key surveillance cameras at the Museum of Anthropology mysteriously went off-line. […]
Social Engineering Used in Museum Heist Read More »
Interesting story that hit the wire last week about another bank security breach. This time 1st Source Bank of South Bend Indiana became the next victim of stolen debit card data. Not a ton of details have emerged yet but we do know the following: 1. A external monitoring service (an MSSP perhaps?) or hired
Indiana Bank gets Hacked…Who’s really to blame? Read More »
You probably have read about the interesting Comcast domain hijack that took very little technical skill a few weeks ago. Apparently these two hackers were able to social engineer their way to obtain access to the Comcast domain registration account that is being managed by Network Solutions. Once they had access they apparently changed the
How not to get your domain hijacked Read More »
I have been doing lots of research over the last few months on online social networking sites to prepare for an upcoming talk that I am going to be giving on the latest threats to social networks…in particular MySpace, Facebook and LinkedIn. Tonight I received new friend request from someone named “Elysabeth” in my email.
Dangerous MySpace Spam Read More »
This past Monday, some silly hacker got the idea that he could easily redirect traffic from Metasploit.com to some Chinese forum using some ARP poisoning directed at the router that the metasploit.com domain resides. Basically he did a MITM attack. Here is an excerpt from HD Moore’s reply on the Full Disclosure mailing list: “Problem
Metasploit.com Attempted Hijack Read More »
Seriously…I don’t go looking for web site security issues or vulnerabilities but sometimes you do “stumble” upon them. 😛 Several weeks ago I was looking for an online schedule of events at one of the local community centers where I live so I did what anyone would do and typed in the URL of the
Stumbling upon Security Issues Read More »
