User avatar
SN
Posts: 1014
Joined: Mon Feb 13, 2012 8:06 pm
Location: Romiley, UK
Contact: Website

Re: Help a friend out with her MSc dissertation?

Sat Mar 24, 2012 11:34 pm

Right click? Ctrl ? How exactly is that going to work on a tablet?
Steve N – binatone mk4->intellivision->zx81->spectrum->cbm64->cpc6128->520stfm->pc->raspi ?

User avatar
Jongoleur
Posts: 1179
Joined: Thu Aug 11, 2011 12:47 pm
Location: O'erlooking the sea, and all those effin windfarms...

Re: Help a friend out with her MSc dissertation?

Sun Mar 25, 2012 7:52 am

SN said:


Right click? Ctrl ? How exactly is that going to work on a tablet?



Use your RIGHT hand! 

Simples!

Oh wait....
I'm just a bouncer, splatterers do it with more force.....

SeanD
Posts: 121
Joined: Wed Sep 21, 2011 12:25 am
Contact: Website

Re: Help a friend out with her MSc dissertation?

Sun Mar 25, 2012 4:39 pm

So I did consider flipping on the professional paranoia hat and having one of my guys take a look at the survey. Taking the available info; Female Friend, one initial likely to be J, on course 56732MM the two year part time Digital Security and Forensics MSc at Edinburgh Napier.

Moving on to a little bit of social engineering and a quick call to Professor Bill Buchanan who heads up the programme in Edinburgh, amazing what an academic will give up, especially if they think there is funding like he got from Guidance last year up for grabs.  So armed now with the contact details of students involved in research on phishing, mapping it back into the available information gives us our mark. Now go to the survey and create a response that includes and email address and some comments, one of which points to a page within the users email domain.  Being a good student "J" is not going to click on a link and may use software to probe it, when she does she will find that the link is clean. The homepage to the site however is not and that is where she is most likely to go, either click through from the clean link or just entering it in the address bar (human nature).  It contains 5 different techniques to execute a drive by download. Done well at least one will work and we install a RAT.

With "J"s machine pwned we can now watch for a couple of days and ensure that she is legit.  Knowing that she is it is OK to do the survey for real and leave an email address.

Of course there is no need to worry about the £25, with what she has on her laptop and a SQL injection attack on smart-survey.co.uk that got control of her account we can take that money whenever (being a good MSc student she has used a paid for service with DP standards rather than a free service).

NOTE:  Beyond doing a little lightweight (less than 2 minutes) research to confirm that the course exists and that the survey was in line with the syllabus.  None of the illegal activity above took place but it is exactly how it could be done, and done very quickly and cheaply.  Whilst we should not be paralyzed by paranoia it is a good think that people on this thread have asked the questions they have.

 

Rek
Posts: 14
Joined: Sat Mar 03, 2012 9:16 pm

Re: Help a friend out with her MSc dissertation?

Wed Mar 28, 2012 3:44 am

SeanD said;
" Whilst we should not be paralyzed by paranoia it is a good think that people on this thread have asked the questions they have."

But you should be paranoid. After all, there is certainly SOMEBODY out there who is out to get you. BUWAHAHAHAHA!!!!!

6 + 8 = 1110

Toby Stokes
Posts: 21
Joined: Sat Dec 24, 2011 7:34 pm

Re: Help a friend out with her MSc dissertation?

Wed Mar 28, 2012 9:31 pm

Done... but I'd never give my email address to a site like that!

User avatar
rgmward
Posts: 25
Joined: Mon Jan 30, 2012 11:55 am

Re: Help a friend out with her MSc dissertation?

Sat Apr 14, 2012 9:01 am

Well, i am glad i completed the survey.  I now have a £25 amazon voucher to but an SD card and a phone charger!

All I have to do is wait for my raspberry.  Really pleased to hear some people are starting to receive theirs.  I have some time to wait....

User avatar
Montala
Posts: 675
Joined: Mon Mar 05, 2012 11:54 pm
Location: Herefordshire (U.K.)

Re: Help a friend out with her MSc dissertation?

Sat Apr 14, 2012 10:20 am

It looks like the survey is now closed.

I hope she received enough information!

Return to “Off topic discussion”