5 ms·
Why an attacker should spend 100$ , sending hardware to the target that could be potentially tracked following the path between the resellers, could transport e
by gabrielblack 7y ago
Why an attacker should spend 100$ , sending hardware to the target that could be potentially tracked following the path between the resellers, could transport evidences like fingerprints or DNA, using a telephone connection that could also be tracked when the same thing could be done with a good radio equipment and more discretion ? Anyway, I am the kind of guy that inspects the ATM praying to find out a skimmer to dissect, so if someone would send me all that cool stuff directly at home is welcome !
Moreover: battery. How many time a battery of reasonable dimensions could survive powering that kind of system ? exaggerating, 3 days without using a heavy use of the phone modem ? But let's say that in that time the attacker reach the target collecting WIFI keys that doesn't mean that he can compromise any PC or phone in the home network. So my advise is to send directly networking hardware compromised (i.e. an access point ) and, if your budget is 100$ , you can send a very nice piece of hardware to the target, avoiding that he throws all that stuff away (if he can't recycle all like me ). Again, if someone could send me a free, 100$ worth AP is welcome.
- core-questions 7y agoThink about the distance factor. Sure, you could get good radio stuff set up so that you don't have to be in the parking lot to break in and can avoid appearing suspicious on any surveillance cameras, but you still have to be within a few kilometers at most. With warshipping you can be across the planet.
- austinheap 7y agoHaving done a handful of red teams our last concern was security cameras since most times no one looks at security footage until they’re already compromised.
- whatshisface 7y agoRed teams have less to worry about than actual hackers if they are identified post-facto on security footage.
- throwaway_391 7y agoYeah but 'APTs' are generally shitty low end numbers-game attacks that target HR with terrible macro based malware to breach company perimeters. Unless you're emulating nation state actors, your ideology of a 'red team' which focuses on physical access is a disservice to your client and your industry.
- deleted 7y ago[deleted]
- solotronics 7y agoAlso, its easy to get a FedEx/UPS/DHL uniform and deliver a package yourself.
- deleted 7y ago[deleted]