+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Are most corporate intrusions done via phishing attacks? (/showthread.php?tid=6135551)
Are most corporate intrusions done via phishing attacks? - alex_pod - Jan 22, 2021
When you hear about well-known corporations getting hacked and either be held for ransom or have their data stolen, is it most frequently initiated through spear phishing?
What are some other ways corporate intrusions happens?
Also, got any good forums for learning to phish? (I'm interested in defending against intrusions)
RE: Are most corporate intrusions done via phishing attacks? - linkinpork - Jan 22, 2021
Hi,
(Jan 22, 2021 05:29 PM)alex_pod Wrote: What are some other ways corporate intrusions happens?
It's not like peopleware is the only part of the computer.
The very point of bug bounty programs is to uncover software vulnerabilities.
For hardware, red team and pentesting wireless attacks are more common than you think.
(Jan 22, 2021 05:29 PM)alex_pod Wrote: Also, got any good forums for learning to phish? (I'm interested in defending against intrusions)
We're not allowed to talk about other forums here. Or phishing for that matter. See Help Docs.
RE: Are most corporate intrusions done via phishing attacks? - alex_pod - Jan 23, 2021
(Jan 22, 2021 07:41 PM)linkinpork Wrote: Hi,
It's not like peopleware is the only part of the computer.
The very point of bug bounty programs is to uncover software vulnerabilities.
For hardware, red team and pentesting wireless attacks are more common than you think.
We're not allowed to talk about other forums here. Or phishing for that matter. See [url=//hackforums.net/misc.php?action=help]Help Docs[/url].
But these day, after repeated and publicized intrusions, big companies hire competent cyber security teams who patch all their software as soon as a new vulnerability is found. And I highly doubt hackers are using zero days to penatrate their system. So doesn't that only leave spear phsishing?
RE: Are most corporate intrusions done via phishing attacks? - linkinpork - Jan 23, 2021
(Jan 23, 2021 03:20 AM)alex_pod Wrote: I highly doubt hackers are using zero days to penatrate their system.
This part made me smirk 😏
I suggest you keep doubting, honestly. Gives you more peace of mind.
RE: Are most corporate intrusions done via phishing attacks? - SecuroServ - Jan 23, 2021
Breaches these day happen often because of website/other software vulnerabilities, people inside the company, social engineering or a combination of them all isn't rare either
RE: Are most corporate intrusions done via phishing attacks? - ics123 - Jan 23, 2021
Typically in smaller companies its because of someone getting phished. Probably due to lack of training