Slashdot Mirror
Attack of the Trojan Printers
snydeq writes "Security professionals are tapping Trojan horse access points cloaked in printers and other office equipment to infiltrate clients who want their defenses tested, InfoWorld reports. Attackers dressed in IT supplier uniforms drop off printers to a company for a test-drive. Once the device is connected to the network, the penetration testers have a platform behind any perimeter defenses from which to attack. 'You can put your box inside a printer tray and glue it shut, and who will notice if there are one or two or three power cables coming out?' one security researcher says of the method. A variant of the attack, presented by Errata Security at the Defcon hacking convention, uses an attack-tool-laden iPhone mailed to a target company to get inside the firm's network defenses."
Wow where did you find "Smart Clients"?
The average person will pick up a USB pen drive from the parking lot and plug it into there PC or Laptop. Heck, I bed 99% would run a program on it called "Owner_Information.exe" To see who to return it to.
I bet good 50% would run a program called "Run_Me.exe" lol
In all honesty most Technical people over think most hacks. It is like watching a person try to pick the lock on a door when the window next to the door is open.