Very creative attacks by the penetration testers: - Map out the organization's staff by Googling Facebook and LinkedIn pages with relevant keywords - Do the s

Very creative attacks by the penetration testers: - Map out the organization's staff by Googling Facebook and LinkedIn pages with relevant keywords - Do the same thing for the IT infrastructure by Googling IT job openings at the target company to find the relevant security technologies - Submit a fake infosec job application to the target; use the phone screen to pump them for additional security info - Exploit a PDF vulnerability that allows you to install a trojan on a bank employee's machine. The information gathering phase of the attack was fairly interesting. The actual break-in seems to have been as simple as "find a current Acrobat exploit". Great read considering FST doesn't appear to be a security-focused publication.