#CyberSecurity: "Sherbrooke said he was sitting on the floor of his basement laundry room in the early hours one January morning with his laptop in hand and “suddenly having an ‘oh s—’ moment.” From his laptop, Sherbrooke ran a script of code with instructions telling the machine in front of him to start a cycle despite having $0 in his laundry account. The machine immediately woke up with a loud beep and flashed “PUSH START” on its display, indicating the machine was ready to wash a free load of laundry.
In another case, the students added an ostensible balance of several million dollars into one of their laundry accounts, which reflected in their CSC Go mobile app as though it were an entirely normal amount of money for a student to spend on laundry.
CSC ServiceWorks is a large laundry service company, touting a network of over a million laundry machines installed in hotels, university campuses, and residences across the United States, Canada and Europe."
Social Engineering in Cybersecurity; Threats and Defenses by Gururaj H L & Janhavi V & Ambika V, 2024
In today’s digitally interconnected world, the threat landscape has evolved to include not just sophisticated technical exploits but also the art of human manipulation. The primary aim of this textbook is to provide a comprehensive and in-depth exploration of social engineering attacks.
What’s a good appreciation gift for a team member who cracks the case? Today a network admin in our IT team caught an ancient sftp server being abused and shut it down. I’m thinking a 6 pack of craft beer.
What has your team done for people who go above and beyond in finding and stopping incidents?
@Legit_Spaghetti oh man only if I wasn’t also just some random schmuck on the IT team.
I’m the security guy so I want to let my fellow team member know I appreciate him saving our asses by catching an anomaly on the network. Makes a bunch of paperwork and follow up remediation work for me but it was a great catch.
@kemotep@Legit_Spaghetti some organizations have a "this guy did great" cash rewards (with a certain amount usable per employee per year), might be worth asking HR if your org has similar. Also sending a note to their supervisor selling their praise is always awesome too and can help if your org does annual review/performance bonuses/etc . Gift cards sometimes work better than booze unless you know they partake + know their preference, but a six pack is a good idea if they'd like it.