4 ms·

It doesn't have to be the same pdf, it could have been an attachments from compromised machine via email/slack. "Hey, can you help me figure this unusual log/tr

• emmelaich 4y ago
  Yep, internal security is brittle. The initial pdf vector would be only the start of a long sequence of hacks, including social engineering. e.g. sending email from managers -- or slack messages as you mention.
  • DelightOne 4y ago
    How do you defend against getting email from internal people, especially from people you expect email from?
    • mavhc 4y ago
      Don't keep your security keys capable of root access on anything that's not a hardware token locked in a safe. Of course if you can access the software running the blockchain and get everyone to install an update, that works too
    • JacobThreeThree 4y ago
      You can call your colleague on the phone to confirm they sent the email asking you to open an attachment.