Feeds

Networking sites could help hackers

Social climbing

Choosing a cloud hosting partner with confidence

Professional networking sites are unwittingly providing hackers with the possible means to carry out sophisticated social engineering scams, a UK security consultancy warns.

SecureTest was able to produce a comprehensive personal profile of an internal employee in a short time using data from social and professional networking sites such as Ryze, LinkedIn, and Ecademy. Combining the technique with careful web searching and cross referencing yielded information that would be difficult to obtain using traditional phone-based social engineering techniques.

In one example, a SecureTest researcher was able to obtain the full employment history and the names of key colleagues of an IT professional in a matter of hours. The worker involved had also listed details of his family members, professional memberships and hobbies.

SecureTest warns that the data could be used to impersonate an individual or to enable the hacker to build a relationship with key decision making personnel within a targeted organisation.

SecureTest isn't able to cite incidents where the attack has been used in practice, but warns that the risk it details is all too real. It advises firms to update their security policies in order to warn workers of the potential threat. ®

Beginner's guide to SSL certificates

More from The Register

next story
NASTY SSL 3.0 vuln to be revealed soon – sources (Update: It's POODLE)
So nasty no one's even whispering until patch is out
Russian hackers exploit 'Sandworm' bug 'to spy on NATO, EU PCs'
Fix imminent from Microsoft for Vista, Server 2008, other stuff
US government fines Intel's Wind River over crypto exports
New emphasis on encryption as a weapon?
To Russia With Love: Snowden's pole-dancer girlfriend is living with him in Moscow
While the NSA is tapping your PC, he's tapping ... nevermind
Forget passwords, let's use SELFIES, says Obama's cyber tsar
Michael Daniel wants to kill passwords dead
Slap for SnapChat web app in SNAP mishap: '200,000' snaps sapped
This is what happens if you hand your username and password to a 3rd-party
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Win a year’s supply of chocolate
There is no techie angle to this competition so we're not going to pretend there is, but everyone loves chocolate so who cares.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.