The smell of hacking: how shaggy security guards save data centers

Carding Forum

Professional
Messages
2,788
Reaction score
1,322
Points
113
The chemical substance was the key to detecting hacking tools.

Sniffer dogs may soon become a means of improving physical security in data centers, as more people use NFC chips that can potentially be used to bypass access control systems.

CyberArk IT evangelist Len Noe shared his vision of the situation with The Register. Noe believes that sniffer dogs can be an effective tool for improving physical security in data centers.

Noe himself wears 10 implants-passive devices that are visible on an X-ray but remain invisible to most security scanners. Noe was able to clone access cards and enter buildings by simply swiping his hands over the readers. If the staff does not notice the absence of the card, the penetration looks like a normal RFID scanning process.

However, Noe implants contain triphenylphosphine oxide (TPPO), a chemical compound that is used in the manufacture of electronic devices. Sniffer dogs are already trained to detect TPPOS, making them the only reliable way to detect people with implants that can clone ID cards.

Noe is sure that the use of sniffer dogs should be considered, since intruders with implants can easily enter data centers. Even if employees spot an intruder, it will be difficult to prove their guilt due to the difficulty of detecting implants and privacy laws.

Noe described possible attacks using implants – storing phishing emails on an NFC implant. An attacker can access the victim's smartphone, download an email, and send it to an employee. Emails sent from trusted corporate mailboxes are less likely to arouse suspicion.

However, according to Noe estimates, only 50 000 – 100 000 people around the world have implanted electronic devices, and only 1% of them can use the chips for malicious purposes. Noe noted that some hacker groups are already successfully using the technology, and cybercriminals are always looking for new tools for attacks. Noe also mentioned the possible use of implants as weapons, especially with the development of brain-computer interfaces such as Neuralink .

Multi-factor authentication already exists to protect against attacks using implants. Noe suggests using a combination of card access and a code or biometric data to prevent intruders. Noe does not exclude the possibility of attracting sniffer dogs to strengthen the security of data centers. Such a measure can become an additional barrier to attackers using advanced technologies for their own purposes.

Source
 
Top