December 31, 2010
Bojan Zdrnja at SANS writes about the new Android malware that Lookout, a mobile security provider, found in an Android application. As Bojan states, “The most important characteristic of this trojan is that it has botnet capabilities. This means that the trojan connects to a C&C server in order to retrieve commands and enables an [...]
Read the full article →
December 30, 2010
Social engineering conducted by phone is the most prevalent type of social engineering attack. There are good reasons for this, communicating over the phone gives the attacker much of the advantages of an in-person con at the office but without the risk of being apprehended if they are caught in their lie. Help desks are most vulnerable because their very purpose is to help callers. Help desk employees are trained to be friendly and provide information to solve a problem. Therefore, they are easier to manipulate by a skilled social engineer.
Read the full article →