154
US nuke reactor lab hit by 'gay furry hackers' demanding cat-human mutants
(www.theregister.com)
this post was submitted on 24 Nov 2023
154 points (91.4% liked)
Not The Onion
12319 readers
558 users here now
Welcome
We're not The Onion! Not affiliated with them in any way! Not operated by them in any way! All the news here is real!
The Rules
Posts must be:
- Links to news stories from...
- ...credible sources, with...
- ...their original headlines, that...
- ...would make people who see the headline think, “That has got to be a story from The Onion, America’s Finest News Source.”
Comments must abide by the server rules for Lemmy.world and generally abstain from trollish, bigoted, or otherwise disruptive behavior that makes this community less fun for everyone.
And that’s basically it!
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Social engineering is an attack older than computers and will always be the biggest vulnerability in any organization. Training helps, but there's always going to be someone that fucks up and clicks the thing they shouldn't.
We send out fake phishing emails, i.e. they're not really phishing emails but they are designed to look like them to see which people in our organization click them.
Often we will just copy and paste a real one so they look exactly like the real thing and there's always some pillock that clicks them and enters their password or something into an obviously fake form. Then when you challenge them on why they were fooled by such an obvious ploy they always say something like "oh I don't really do computers" as if that's an excuse.
And it's always the people you think it's going to be. The ones that call up to tell you that their computer is running slow and invariably it's because they have 945 Chrome tabs open.
The thing is, in my org it's not; they get people from every team on the reg. One of the senior admins (OS admins, not office admins) on my team has gotten hit because our infosec team is mean and will send out emails from 'hr' when he is sending them too. They've almost gotten me a couple of times, and I'm basically the liaison to their team from mine.
My cito was laughing about it the other day because his name gets dragged through the dirt when it's his 2nd who does shit like send that stuff to new hires an hour after they start day one. Tends to keep people in their toes.