Tuesday, January 27, 2009

Jump Drives & Social Engineering

Jump drives.jpg

Social engineering is effective because frequently the weakest link in the security chain is the human element. Along those lines here is a bit of a horror story featuring high tech and deceit.

It seems that some nefarious types are now leaving jump drives laying around in parking lots, office building lobbies, etc. When someone picks them up and plugs them into their computer, the drive installs a trojan horse that begins recording all types of private data and sending it over the Internet to the crooks who put the drives out there to start with.

It's unfortunate that we have to so paranoid about this type of situation, but they are documented. They DO happen. It seems the best defense is to simply buy your own and never pick one up.

It also makes me a bit paranoid with all the jump drives that I receive from manufacturers with product info on them.

Post a Comment