Some of the Most Powerful Hacks Are Low Tech – But Extremely Creative
A Clever Ruse Is Priceless When It Comes to Justifying The Security Sale
Today I want to show you the one hack that always succeeds…with some practice, you’re assessment team will get in every time!
Continuing on in a series of articles on Assessing Risk, no assessment would be complete without testing the users. Once simple test comes in the form of social engineering. The problem is, most assessments leave out end-users altogether!!!!
Get The Details On Selling With Assessments In My Book, The House & The Cloud – Here’s a special offer that’s almost FREE
In this short video, a woman (Cleverly disguised as mother w/ crying baby) takes over the guys phone account in just minutes. This is the kind of thing your business-leader clients have to see…it’s so simple, it’s unbelievable.
…So simple, my son did this very thing to me just a couple of weeks ago – needing to make a change to his account (under my name) while I was traveling! (Shame on Verizon – they let him in!!!)
The End-User Is Your Client’s Biggest Hole In The
The balance between customer service, time crunch/deadlines, and keeping the security policy is not an easy one.
The baby crying in the background (an MP3 playing on this woman’s computer) creates the perfect “I’m an innocent, ignorant mother just trying to get this done for my husband…” scenario.
Who wouldn’t feel compassion for this poor woman? What would your clients do?
The Guy In The Video Is The Skeptic…This Is Your Client – The Decision Maker
As the video begins, you know it’s only 2+ minutes long. How can this be possible.
However, once she fires up the baby-crying audio, and starts with her dumb-blond act, you know she’s going to win! It’s almost unfair!
Watch the Video – It’s Short…any ideas on how you can incorporate this?
I’m not saying you should make a call to their phone company with a crying baby in the background. But look at her face – who’s NOT going to help her?
I AM saying, you want to test the end-user’s ability to spot a ruse. That’s where the attack is going to happen…
I’ve heard it a million times – we don’t do free assessments!
This, my friends, is an assessment done in under 3 minutes! How much did it cost?
It’s a pen test…It’s not comprehensive, but it doesn’t need to be. This 2+ minute example demonstrates how just about anyone (willing to play the role) can break in, in minutes, with ZERO hacking kills.
So what is the likelihood someone will break into your client’s data?
It’s 100% every time, because, every time, there’s at least one sympathetic, authorized user, who will eventually succumb to the ruse of a creative hacker. It’s time to start thinking more strategically about assessments and closing business.
Copyright 2017, David Stelzl
Get The ONLY BOOK on Selling Security and MSP services: The House & The Cloud
High Tech Business Growth 