91
Lawsuit says Clorox hackers got passwords simply by asking (www.nbcnews.com)
submitted 1 year ago by to c/cybersecurity@sh.itjust.works
12 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 1 year ago (1 child)

Yup, it is. Social engineering is by far the most effective means of gaining unlawful access to any system.

Humans are always the weakest link.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 10 points 1 year ago

    Exactly. Many breaches follow this pattern:

    1. Learn the name and some basic details about the secretary or something
    2. Call corporate tech support asking for a password reset claiming to be the secretary
    3. Access important stuff since secretaries have a surprising amount of access

    Replace "secretary" with some other relevant individual who has a surprising amount of access and wouldn't attract attention.

  • permalink
  • fedilink
  • source
  • parent