That device on my work computer – was it there yesterday?
August 13th, 2008 by Juha-Matti, Filed under: Commentary, Corporate Security, Insider Threat, Physical Security
Bank robbers using remote control device to control the mouse cursor of bank employee have been jailed now, report the headlines.
We can’t expect that an ordinary worker will know if USB sticks, peripherals with Bluetooth enabled, innocent looking hardware keyloggers etc. connected to their desktop computers and even to laptops are malicious – and not installed by a local IT support.
This Swedish worker recognized an odd device connected to his workstation, but a target organization is not so lucky every time. ”Employee quickly pulled the plug, interrupting a transfer” ($7.9 million), but there was an extra cable which ended up under his desk.
It’s worth of mentioning that this remote control device had been installed to bank workstation during a previous break-in, during which nothing had been stolen from the building.
Therefore, the ways how we can protect against these threats are not so typical:
* Check the USB and PS/2 connectors of your workstations and servers several times a year
* Always check these connectors when a computer returns from being repaired
* Remember that visitors have a possibility to connect these devices often
-
Just Guess



