Infosec fail thread:
So, in the last couple of weeks I've been looking into a product we were thinking of offering to our customers.
This time, we were looking into the FootfallCam 3D plus. A counter system to measure how many people are in a building.
1/n
After being released from detention, Olga Kerimova, election campaign chief for opposition candidate & @navalny associate @SobolLubov, got her iPhone back. It came with an upgrade: a crudely onboarded bugging and tracking device.
These nitwits can't do anything subtle.
None of the social media buttons link anywhere. Single static image with entire footer
Lack of details on sender or receiver
Hilariously if you do go to pay the $3 (fall for the scam so far), then you get this page...such greed...much special offer...many wow.
- good luck getting any staff to fill things put after this
- hopefully for a large org an email as targeted as this would get reported and victims in the org notified.
- security in depth requires measures to prevent phishing to go beyond 'eeucating users'
https://t.co/ov7C6yNRqk
Considerations:
- when testing phishing realism matters
- wonder if there is a way to balance effectiveness vs impact on moral.
I organized my notes and made it into slides when I learn about segment heap .
If you find something wrong, please let me know.
Hope it can be helpful fo those who want to learn segment heap in windows kernel.
https://t.co/AtEKpRRA7s