Why is Word document phishing even possible in this day and age? Doesn't Windows 7 and above protect against this? Or do users just automatically click YES when Windows asks if it's ok for a program to make changes to the system?
Windows constantly bombards you with elevation prompts, dialog boxes, etc. A large number of people literally do not care at all what the box says they just want it to go away so they can do the thing they were trying to do with their spreadsheet bob from accounting sent over so they can go home to see their kids at 6pm.
IME Windows 7 and above are judicious about the elevation prompts, at least compared to Vista. Sadly too many legacy apps still need those privileges. And those users who don't understand the risks may be more likely to be using that kind of older software.
"justcauseisjustthat wrote:
I'm surprised how little they got but then no one is probably looking at the corporate phones on desks. Cisco, Avaya, ShoreTel etc are all vulnerable to be used as bugs to tap offices remotely."
Bugging corporate appliances is easy as well if done by design. A WiFi repeater box plugged in the conference room wall could have a miniscule MEMS microphone and audio preamp wired to a ADC port on the main microcontroller (assuming it's too small to have an audio input), so that it can listen and relay elsewhere when instructed to. And let's not forget about networked printers or even the coffee machine if connected. At an old company I worked with, many decisions of vital importance were taken while drinking coffee on the armchairs around the machine.
8 comments
[ 2.7 ms ] story [ 14.6 ms ] thread"justcauseisjustthat wrote: I'm surprised how little they got but then no one is probably looking at the corporate phones on desks. Cisco, Avaya, ShoreTel etc are all vulnerable to be used as bugs to tap offices remotely."
Bugging corporate appliances is easy as well if done by design. A WiFi repeater box plugged in the conference room wall could have a miniscule MEMS microphone and audio preamp wired to a ADC port on the main microcontroller (assuming it's too small to have an audio input), so that it can listen and relay elsewhere when instructed to. And let's not forget about networked printers or even the coffee machine if connected. At an old company I worked with, many decisions of vital importance were taken while drinking coffee on the armchairs around the machine.