ANX Corporate Blog: Posts tagged as usernames

Showing 1 through 1 of 1 total posts

Aug 18th 2011, 20:39

DefCon 19 - Weaponizing Cyberpsychology

Posted by Steven Fox
Company X, a transportation company in the Midwest, had a well-managed external network infrastructure.  The few vulnerabilities that existed led to low-impact information breach that did not compromise corporate or customer information.  Satisfied with the status of their network security, I turned my attention to the human network.
Searching for the client name on sites like Twitter, Facebook, and LinkedIn, I discovered employee names and corporate activities that were not shared on its website.  As the search continued, the client's culture, processes, and lexicon emerged from the corporate dialogue. 
This information enabled me to persuade employees to give me access to critical information and secured areas. This included usernames,

Comment BubbleComments (0)