Social Engineering At Its Finest

If you’re a frequent reader of my web site, you’re most likely smarter than the next guy when it comes to technology — unless you work at a company like mine, where you’re surrounded by geniuses.
Given that, it probably goes without saying that if you found a USB flash drive on the street and picked it up, you wouldn’t risk compromising your computer, network or employer’s network by just plugging it in and viewing the contents, would you?
Unfortunately, the rest of the world isn’t quite as smart as we are. According to a recent Secure Network Technologies, Inc. audit of a credit union, 100% of the Trojan-laden, password-sniffing, network-crippling USB flash drives they planted outside the building were unwittingly plugged in, used, and ultimately infected the host machines. All by employees eager to see the contents.
Should you go sounding alarms throughout your company about the dangers of thumb drives? No, of course not, but it’s probably safe to say that end-user security begins with clamped down operating systems and cognizant, diligent employees.
Fortunately, my company’s product not only alerts to changes made to a host’s file system — it can also disable USB drives when a compromise is detected, or, better yet, instantly protect the filesystem to prevent casual copying, data theft or other Trojan payloads from taking hold. While it can’t stop social engineering, it can help keep your network and data in check. What a relief.
Of course on a Mac, it is even harder to infect, so can you still read it?