Sony Pixel Power calrec Sony

The legend of Tom, Dick or Harriet: a tale of physical security and social engineering

25/08/2023

The following is based on real events; names and other details have been changed to maintain confidentiality and protect the innocent.

When anyone mentions cyber security and information security , many of us immediately think of the internet and criminals hacking our networks. We're right to think like this, but we're forgetting something equally as important: physical security, which is just as likely to come under attack. This is where our tricky trio above come in. They're all experienced consultants and regularly test the physical security of clients, while others investigate logical security.

By the time you meet them, they've already done a lot of work: online reconnaissance using the client's website, LinkedIn (and other social media), public company information and a general internet trawl to garner details of directors, staff, offices - including managed buildings, departmental structure, leadership team, current and past projects, clients, supply chain, investors, annual reports, general news and potentially much more. A thorough trawl indeed.

Next step: they'll visit your offices and, without stepping foot inside, check out barriers, receptionists, use of proximity cards, ID badges, specific lanyard colours and designs, public areas, shared office space, all the entrances to the building and who they're used by, contractor access, car parks, where staff go for coffee and lunch, busy and quiet times, windows which give internal views, even down to how you call the lifts and how many staff head to each floor. A long list of things that is certainly not exhaustive. They'll easily be able to identify areas of poor security and the rate at which controls are bypassed, such as tailgating or opening doors for others and not checking identification.

Meet the consultants Let's introduce you to Tom. Tom is a very nice guy, young, keen, always smiling. Tom's target? A small, merchant bank in the city. When he arrives, he's got company ID that looks legitimate, knows where he's going, and looks confident. With his phone to his ear and clutching two laptop bags, he arrives with a group of others and silently indicates his hands are full and if you don't mind opening the door for him ? Tom stands by the lifts still talking on the phone, watching as someone waves their proximity card in front of the screen to call the lift and presses the button for the fifth floor - Tom's destination. He jumps into the lift, still on the phone, and mouths thanks'. Tom knows the fifth floor is where the finance department is (from the reconnaissance phase, remember?), he exits the lift and walks in the opposite direction to the other person. Rounding a corner, he spots a half-empty hot-desking area. Ending his fictitious phone call, he quickly gets a laptop out of one of his bags and sets up. Someone wanders up behind him and says hello. Tom isn't fazed. He turns around, says hi and introduces himself, explaining that he's working on the company's latest marketing campaign and is usually based in the Edinburgh office. They chat some more. His audience is instantly at ease, they're in finance so know nothing about marketing but it's obvious that Tom is genuine, he knows all about the way the bank operates. Tom asks where the finance director's office is as he needs to speak to him later. The office is pointed out to him, and the employee is thanked for their help. After a few minutes, Tom leaves his laptop and goes to the bathroom where he hides until lunch. When he re-emerges, the office is quiet, he picks up his laptop - it was never switched on and contains no data anyway - and walks to the office of the FD. Nobody is around, but the FD's laptop is on the desk. Quickly but confidently Tom picks up the laptop, disconnects the cables, and puts it in his second bag. Ostensibly making arrangements for lunch on his phone he leaves, using the same techniques to get out as he did to get in.

Consultant number two Dick's target is a utility company site. He arrives wearing a hard hat and high vis jacket over a suit, he looks the part and most certainly like he's supposed to be there. If anyone asks, he's here to do an inspection and is usually based at head office, so unfamiliarity with the site is expected. He uses the car park exit, which he knows is not observed, to enter the site. Dick reaches the unmanned reception area but now needs to get through the locked door. Luckily, he spots a worker outside and introduces himself, spinning his prepared story and needs to be let through. He apologises for not having his official photo ID but does have a business card - with the company logo and address - which he presents. They share a laugh when Dick suggests his identity can be confirmed by calling the mobile number on the card and checking if his phone rings. This worker is impressed by Dick's friendliness and air of authority and is only too pleased to let Dick through the door! Once inside, Dick can wander through most of the building, being careful to keep away from areas where senior staff and managers are so he's not questioned. He takes photos of any documentation, internal information and security controls he finds. He also unplugs a USB memory stick from a workstation before exiting the building using another door which opens from the inside and is soon off the site.

and consultant number three Harriet's target is a technology start-up. They're based in a shared office which has very lax security: no IDs are worn, the reception is unmanned, the secure doors are propped open, and everyone inside is so used to strangers passing through they have no problem with opening doors for Harriet - how useful. She's young, vibrant and has a cheery thank-you for everyone as she qu
LINK: https://www.resillion.com/the-legend-of-tom-dick-or-harriet-a-tale-of-...
See more stories from eurofins

Most recent headlines

04/08/2024

Dalet Appoints Santiago Solanas as CEO to Lead Next Era of Growth and Innovation

Dalet, a leading technology and service provider for media-rich organizations, is excited to announce Santiago Solanas as its new Chief Executive Officer (CEO)....

03/06/2024

Dalet and Veritone Reach Agreement to Distribute, Transact and Monetize Media Archives

Dalet, a leading technology and service provider for media-rich organizations, a...

08/05/2024

Global Telecom & Pay TV Services Market to Slowdown in 2024

NEEDHAM, Mass. The International Data Corporation is predicting that worldwide spending on telecom services and pay TV services will increase by 1.4% in 2024 to...

08/05/2024

Apple Unveils New iPad Live Multicam Production Studio

CUPERTINO, Calif. In a notable development for news and live video production, Apple has unveiled a number of significant upgrades to its Final Cut Pro software...

08/05/2024

Pliant Technologies to Showcase New Smartboom Lite Headset at InfoComm 2024

Pliant Technologies has announced that it will be presenting its new SmartBoom LITE Headset at InfoComm 2024 (Booth C5116). The latest updates include enhanceme...

08/05/2024

Tubi Launches 'Stubios' to Encourage Aspiring Filmmakers

SAN FRANCISCO Fox's ad-supported streaming service Tubi has launched Stubios, a fan-fueled studio for aspiring filmmakers and their fans that the company sa...

08/05/2024

Five More Stations Launch NextGen TV In San Antonio

SAN ANTONIO, Texas Five more stations have launched NextGen TV service, bringing to nine the number of local TV services on-air with ATSC 3.0....

08/05/2024

Tegna Names Greg Retsinas President & GM of KGW in Portland

TYSONS, Va. Tegna Inc. has announced that Greg Retsinas has been named president and general manager at KGW, Tegna's NBC affiliate serving the Portland area...

08/05/2024

Olivia Colman and John Lithgow Star in Sophie Hyde's New Project JIMPA

08 05 2024 - Media release Olivia Colman and John Lithgow Star in Sophie Hyde's New Project JIMPA Olivia Coleman and John Lithgow in JIMPA. Photo credit: ...

08/05/2024

OpenDrives Joins AWS Partner Network

OpenDrives Joins AWS Partner Network Brie Clayton May 7, 2024 0 Comments Atlas software-defined platform now available via AWS trusted partner network...

08/05/2024

Animate AI Matte Paintings in After Effects

Animate AI Matte Paintings in After Effects Graham Quince May 7, 2024 0 Comments Arguably the best video use for AI generated images is Matte Painting...

08/05/2024

Throw Expression in Adobe After Effects

Throw Expression in Adobe After Effects Andy Ford May 7, 2024 0 Comments The Throw expression is a time-saver in After Effects. It allows you to mov...

08/05/2024

Join FilmLight in Toronto: Baselight 6.1, Nara and more

Join FilmLight in Toronto: Baselight 6.1, Nara and more Brie Clayton May 7, 2024 0 Comments Thursday 30th May, from 2:30PM, Hosted by Alter Ego 488 ...

08/05/2024

Gray TV Reports $75 Million in Net Income for Second Quarter

Gray Television reported a first-quarter profit as advertising revenues rebounded to above pre-COVID-19 levels....

08/05/2024

Meghan Trainor, Bleachers, Chance the Rapper Lined Up for Today' Summer Concert Series

The Today show shared the performers on its summer concert series, which feature...

08/05/2024

Lewis Dodley, Spectrum News NY1 Anchor Since Its Launch, Sets Retirement

Lewis Dodley, longtime anchor for Spectrum News NY1, will retire at the end of May. He's been on the air at the Charter Communications-owned local news chan...

08/05/2024

Scripps Sets Studio Shows for Ion's WNBA Friday Nights

Scripps Sports said it plans to air a new studio show when a new season of WNBA Friday Night Spotlight starts May 24....

08/05/2024

NBCUniversal Will Pitch a Combination of Content, Tech in Upfront

Advertisers are looking to reach the right audiences and tell their stories inside compelling content, Karen Kovacs, president of client partnerships at NBCUniv...

08/05/2024

May 07, 2024

Professor emeritus John (Jack) Johnson elected to the National Academy of Sciences Johnson's multi-disciplinary research has been instrumental in shaping ou...

08/05/2024

zweiB updates to latest version of R&SCLIPSTER

zweiB updates to latest version of R&S CLIPSTER Specialist in deliverables for cinema, events and trade shows Rohde & Schwarz, a global leader in broadcast...

07/05/2024

NAB Show 2024

NAB Show 2024 Utah Scientific rocked the 2024 NAB Show in Las Vegas, unveiling two new game-changers in video signal management. Our primary focus this yea...

07/05/2024

Paul Whitehouse takes viewers through The Sketch Show Years in new 4-part series on Gold

7th May 2024 The nations favourite comedy channel Gold has teamed up with the ma...

07/05/2024

Your Guide to Having a Jam-Packed Sundance Institute Summer

There's something special about summer. We're not sure whether it's the warmer weather, the longer days, or something else a bit more magical, but s...

07/05/2024

NITV appoints Michael Rennie as Presenter and Senior Producer for NITV News

NITV appoints Michael Rennie as Presenter and Senior Producer for NITV News Media releases NITV has announced the appointment of Michael Rennie as Presenter...

07/05/2024

Network flexibility: A Vital Consideration for SATCOM Resiliency

The ability for line-of-site tactical voice and data networks to seamlessly traverse over Satellite Communications is an emerging requirement to assure warfight...

07/05/2024

L3Harris Avionics Repair Station Becomes the First in U.S. to Be Awarded European Military Airworthiness Certification

On April 5, 2024, the L3Harris Avionics Products Repair Station (NN2R037L) in Gr...

07/05/2024

Clear-Com Celebrates Theatre Triumphs in Light of 2024 Tony Award Nominations

eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({ content_source:......

07/05/2024

macOS Ventura Compatible

Share this article width=32 height=32 loading=lazy data-lazy-src=https://apogeedigital.com/app/themes/juniper-theme/src/img/icons/facebook-purple.svg /> wid...

07/05/2024

Disney Streaming DTC Operations Produce Their First Profits

BURBANK, Calif. The Walt Disney Company has finally delivered some from profits from its hefty streaming investments, with the second quarter of its fiscal year...

07/05/2024

Bonnie Hammer, Jen Psaki Share Books and Workplace Lessons at 92nd Street Y

Bonnie Hammer, vice chair of NBCUniversal, and Jen Psaki, MSNBC host, read from their new books at the 92nd Street Y in Manhattan Wednesday, May 8. Hammer's...

07/05/2024

Paramount Plus Orders Tracy Morgan Comedy Set in World of The Neighborhood'

Paramount Plus has ordered the series Crutch, a comedy that is a spinoff of CBS comedy The Neighborhood. Tracy Morgan stars....

07/05/2024

Daytime Emmys Announce Lifetime Achievement Recipients

Edward J. and Melody Thomas Scott and Lidia Bastianich will receive Lifetime Achievement honors at the 51st annual Daytime Emmy Awards in June, the National Aca...

07/05/2024

Al Roker, Wendy McMahon, Stephen A. Smith Set for Giants of Broadcasting Honors

The 2024 Giants of Broadcasting & Electronic Arts luncheon and awards ceremony happens in New York November 12, and the honorees are Al Roker, weather and featu...

07/05/2024

Dabl Debuts New Weekday Schedule

Dabl Network has added The Wayans Bros., The Jamie Foxx Show, Living Single and Everybody Hates Chris to its weekday and weekend lineups. Those shows join the l...

07/05/2024

Disney Entertainment DTC Business Gets Out of the Red in Q2

After winning a proxy fight, The Walt Disney Co. said its entertainment business turned a profit and added subscribers in its fiscal second quarter....

07/05/2024

Victor Wembanyama, Top NBA Rookie, Featured On Pass The Rock'

NBA Entertainment is closing out the second season of its series Pass the Rock with a look at Victor Wembanyama of the San Antonio Spurs, the league's rooki...

07/05/2024

Syncbak Rebrands as Zeam Media After Streaming Platform Rollout

Syncbak, which provides stations with streaming capabilities, said it is rebranding as Zeam Media....

07/05/2024

Magnolia Pictures Licenses Content To Stream on Samsung TV Plus

Samsung has made a deal with Magnolia Pictures that will bring titles from Magnolia to the Samsung TV Plus free streaming platform....

07/05/2024

Amazon Rolling Out Interactive Commercial Formats for Prime Video (Upfronts)

Amazon, which has added commercials to Amazon Prime Video, is rolling out new interactive ad formats that will enable advertisers to engage streamers and sell s...

07/05/2024

Syncbak Now Zeam Media

Syncbak, a 15 year-old provider of streaming tech for local broadcast stations has rebranded itself, adopting the name of its streaming service launched in Febr...

07/05/2024

Maximising resources: Keys to POST Luxembourg's success in the evolving media landscape

POST Luxembourgs journey with TAG Video underscores how finding a vendor who und...

07/05/2024

Survey: Amazon's Push into Ad-Supported Streaming Is Working

PORTSMOUTH, N.H. New findings from Hub Entertainment Research provides extensive data showing that the majority of consumers will opt for lower cost ad-supporte...

07/05/2024

The Library of American Broadcasting Foundation Unveils the 2024 Award Recipients

NEW YORK The Library of American Broadcasting Foundation (LABF) has announced th...

07/05/2024

Lindsey Reiser Joins CBS News 24/7 as Anchor and Correspondent

CBS News has named Lindsey Reiser an anchor and correspondent for CBS News 24/7, the network's live, streaming news service. Reiser, who was most recently a...

07/05/2024

Tablet Shipments Show Signs of Recovery in Q1

NEEDHAM, Mass. After more than two years of decline, worldwide tablet shipments posted modest year-over-year growth of 0.5% in the first quarter of 2024 (1Q24),...

07/05/2024

ESPN Pulls in Highest April Prime Time Audiences on Record

ESPN is reporting that April was a record-setting month as the network delivered its best April prime time audience on record, dating back more than 30 years....

07/05/2024

Kirsten Donaldson Joins NAB as VP of Public Policy

WASHINGTON, D.C. The National Association of Broadcasters (NAB) has announced that Kirsten Donaldson has joined NAB as vice president of public policy. Donaldso...

07/05/2024

Don't miss Bark in the Park, Margaritaville Night & Bull Sharks Night this week at the DBAP

The Bulls are back home again this week from May 7-12! Don't miss out on any...

07/05/2024

Tonight on House of Zwide: Mampho cautions Maria against making a move on Isaac

Tonight on House of Zwide: Mampho cautions Maria against making a move on IsaacDon't miss Tuesday, 7 May's riveting episode of South African soapie Hous...