Presentation about the most dangerous attacks on Companies and People. The true power of physical security, Social engineering, tips and tricks about malware and hacking tools and devices

1. Hacking a Company
Igor Beliaiev

2. whoami
Security Engineer
OWASP Lviv member
Igor Beliaiev

3. Red Teaming
A red team is an independent group that challenges an
organization to improve its effectiveness.
Penetration testers assess organization security, often
unbeknownst to client staff. This type of Red Team
provides a more realistic picture of the security
readiness than announced assessments.
(c) Wikipedia

4. Red Teaming … of the airport security
95% failure rate
67 out of 70

5. %companyname

6. Compliance vs Security

8. Attack planning
The weakest part in security?
The security level of the system is
determined by its most insecure element
The most valuable information in company?
PEOPLEMONEY CLIENTS
Choosing targets Finance
IT(backups, access, data)
Accounting
Infrastructure Legal

9. Risks analysis
Technological risks:
Malware/viruses/intrusions
Cyber attacks
Service provider failure
Physical security (f.e. loss of devices)
Data related vulnerabilities
Phishing
Human risks:
Human error/mistakes
Insider sabotage/theft
Lack of skills
Lack of knowledge
Lack of guidance

10. Social Engineering Works

11. Social Engineering Works

12. Caution - a lot of BLUR inside

14. Ask to use your USB flash

15. Let’s go deeper

16. Is it a feature?

17. Acting like IT Support

18. Accounting

19. Finance

20. IT support

21. Change in mindset needed

23. going inside…SoftServe

24. igor@beliaiev.com
skype: ghost-bel