Disgruntled Employee | search
Click here to view Disgruntled Employee news from 60+ newspapers.
Bookmark or Share- Technical Methods of Information GatheringA disgruntled employee that’s blogging about his company’s problems may be susceptible to a sympathetic ear from someone with similar opinions or problems. If the target’s industry is somewhat standardized than details such as jargon/vocabulary or policy can be gathered from industry or subject matter experts.
- Real World Examples - Security Through EducationThe social engineer will have to get this fixed as soon as possible. Normally the employee will attempt to help by using their own badge or fob to allow the social engineer into the facility. Opposite Sex. As a special note, it is usually the case that a social engineer may have better luck with ‘piggy-backing’ an employee of the opposite sex.
- Phone - Security Through EducationThe attacker will attempt to gain as much information as possible including phone numbers, employee titles, address, social security number and other information; Equipment. Phone – A phone is necessary to conduct the phone attack; Caller ID; Voice Changer – Makes the voice sound deeper like a grown up man or higher to sound like a woman
- Impersonation - Security Through EducationThe bad actor is hoping that an employee will pick up the USB thumb-drive and insert it into their computer to identify its contents and owner. If an employee inserts the infected USB thumb-drive, the malicious software either executes automatically, or with the user taking some action. Vendor Impersonation
- Disgruntled Employees - Security Through EducationIn addition to disgruntled employees, it’s important to consider the other insider threat; the ex-employee who maintains access to corporate applications. The Ex-Employee According to a survey conducted by OneLogin an alarming 50 percent of ex-employees retain access to corporate applications after their employment has ended.
More
