Intel: Criminals Getting Better At Data Exfiltration

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
According to a new report from Intel Security, crooks are finding new ways smuggle data out of the workplace.

For example, if a company's employees post pictures to Twitter, attackers can embed data into images so that the image still looks normal to the human eye, and attach the image to an otherwise harmless-sounding Twitter post. "The attacker can then follow the Twitter feed," said Grobman. "It looks legitimate but it is actually smuggling data out."
 
hen companies need to analyze how that data is supposed to move within the company, look at mechanisms they can put in place to monitor those data flows, and restructure their access controls.

Pretty much this. If you know how the data stream is supposed to flow, and where it's supposed to flow...then maybe you have a shot if data begins meandering in an odd way, unexpected path/waypoint, or other suspicious metrics.
 
Sure.. It's the employers fault.

This guy.

Sleazy-businessman-smoking-cigar-Shutterstock-800x430.png


Relies on this guy to keep his data secure.

iStock_000016596006XSmall.jpg


But then hires this guy to also keep his data secure.

article-2150225-134DF83D000005DC-214_634x741.jpg


But they both betray him unless he gives them decent pay. Probably a good idea to be nice to you IT staff as well.
 
Seems pretty extreme. Probably a military installation or something like that. All the finanical firms I was with, you can easily just stick in a USB stick or email the data out.
 
You can't stop the 1 's and 0's from leaking out unless the network is not connected to the internet and all USB ports are disabled.
 
You can't stop the 1 's and 0's from leaking out unless the network is not connected to the internet and all USB ports are disabled.

This, except how are you going to use your keyboard and mouse if you disable all the USB ports ;)

Even if you lock down the hardware, and cut off internet access, people can still do print screens or simply write down the information.
 
This, except how are you going to use your keyboard and mouse if you disable all the USB ports ;)

Even if you lock down the hardware, and cut off internet access, people can still do print screens or simply write down the information.

Or take pictures of the screen with a cellphone.
 
Or take pictures of the screen with a cellphone.

Which is the reason cell phones are not allowed at the desk while working where I work. They have cameras watching the desks. Unfortunately, they still have pen and paper and can write the stuff down. They take their pieces of paper, go into the washroom, camp out in a stall, and snap pictures of their pieces of paper. Where the pictures go from there is anybody's guess. They flush the pieces of paper down the toilet.
 
Back
Top