Уровень 0 · материалов: 4
В кластер входят документы о методах обмана пользователей для получения доступа к системе через оборудование или учетные данные, но не входят документы о внутренней инфраструктуре мошенников.
Общие признаки: манипуляция людьми, уязвимости USB-устройств, фишинг, обход мер безопасности
Группа выше: Социальная инженерия как метод
Смысл: The main idea is that curiosity makes humans vulnerable to social engineering attacks, specifically through the use of abandoned or delivered USB drives that can contain either destructive malware or hardware designed to physically destroy a computer.
Cybercriminals in Australia are using human curiosity to spread malware and hardware killers by leaving USB drives in mailboxes.
Смысл: The main idea is that emotional stress can bypass technical knowledge, making anyone vulnerable to phishing. The text demonstrates how criminals combine physical theft with social engineering to fully unlock stolen devices by tricking users into revealing their credentials.
A tech-savvy user accidentally helps a thief unlock a stolen iPhone XS by forwarding a phishing link to the victim during a moment of emotional panic.
Смысл: The main idea is that the Rubber Ducky USB device has evolved from a simple keystroke injector to a complex programmable tool capable of adaptive attacks and stealthy data exfiltration, highlighting a persistent security vulnerability in how computers trust USB peripherals.
The Rubber Ducky USB device has become significantly more dangerous with DuckyScript 3.0, enabling adaptive payloads and stealthy data exfiltration via keyboard LEDs.
Смысл: The main idea is that physical security measures (like sealed cabinets) are ineffective if social engineering is used to trick authorized personnel into bypassing those measures using modified hardware.
Attackers stole CNC programs by hiding a USB flash drive inside a mouse, which a bribed employee tricked an admin into plugging into a locked machine.