Social Engineering: Anatomy of a Hack
As the founder of Lares, a Colorado-based security consultancy, social-engineering expert Chris Nickerson is often asked by clients to conduct penetration testing of their on-sight security. Nickerson leads a team which conducts security risk assessments in a method he refers to as Red Team Testing.
Nickerson and crew recently took on such an exercise for a client he describes as “a retail company with a large call center.” With some prep work, Nickerson says the team was able gain access to the company’s network and database quite easily. Read on to find out how they did it, and what lessons you can take away for shoring up your organization’s defenses.
“If someone is coming to work on your environment, you should probably know who they are. If you think of your company like your home, you do things differently. You are not going to just let someone walk into your house. That is the kind of philosophy companies need to inject into corporate culture.”
See Social Engineering: Anatomy of a Hack, by Joan Goodchild, at CSO Online.
Tags: cybersecurity, hacker, information security, InfoSecurity, social engineering
