레이블이 metasploit인 게시물을 표시합니다. 모든 게시물 표시
레이블이 metasploit인 게시물을 표시합니다. 모든 게시물 표시

2016년 4월 11일 월요일

이메일 피싱 캠페인을 통한 핑싱 공격 방어 | 메타스플로잇(Metasploit)

카페 > 뉴딜코리아 홈페이지 | 뉴딜코리아
http://cafe.naver.com/rapid7/2341

Combating Phishing Attacks

How to Design an Effective Program to Protect Your Organization
Against Social Engineering
오늘날의 데이터 침해의 대부분은 외부에 악성코드를 포함된 피싱 이메일로 시작한다 ~
이것은 기업이 가정 먼저 해결해야 할 문제 이다 ~


이메일 방어 훈련 및 모의 침투 Test 수행
 뉴딜딜코리아 컨설팅사업부 (070-7867-3721, ismsbok@gmail.com)

Most of today’s data breaches start with a phishing email, giving company-confidential data to malicious outsiders.

This is a real problem that companies need to address. Phishing attacks are the most frequently used form of social engineering.

They work because they take advantage of cognitive biases, or how people make decisions. These techniques prey on human emotion by appealing to greed, curiosity, anxiety or trust. Phishing means that attackers are fishing for your private information.

Attackers attempt to acquire information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication.

Many times this is done to steal a victim’s login credentials and other confidential information. Phishing continues to grow and become more widespread with attacks up 37% year over year, and 1 in every 300 emails on the web containing elements pointing to phishing.

1 So, how can you combat phishing attacks and protect your company and its employees?

This paper will discuss the problem of social engineering and phishing along with its consequences, and will outline approaches for solutions to safeguard your organization.


 웹비나 동영상  :




2016년 3월 21일 월요일

메타스플로잇(metasploit)를 이용한 피싱 메일에 대한 테스트

카페 > 뉴딜코리아 홈페이지 | 뉴딜코리아
http://cafe.naver.com/rapid7/2275

메타스플로잇(metasploit)를 이용한 피싱 메일에 대한 테스트

조직(기업) 보안을 진단하는 과정에서 "피싱 메일에 대한 테스트를 하자" 라는 취지에서
메타스플로잇의 email phishing campaigns 기능을 이용하여 전 구성원 피싱 메일에 대한 테스트를 수행하였습니다

별도의 솔루션 과 컨설팅 없이 피싱 메일 테스를 수행이 가능하며, 그 결과를 직관적으로
확인이 가능하여 전사적인 보안 대응이 가능합니다


Metasploit is very popular for penetration testing in the infosec community.

The Metasploit framework is a community project that anyone can use for free - so you might ask yourself, “Why would I pay for something I can get for free?”  Upgrading to Metasploit Pro is a great investment - especially if you are new to penetration testing. There is a GUI to get you started, you have phone support if needed, and an expansive feature set. Watch and learn how you can use Metasploit Pro to:

  • Make the most of your time at work and maximize output from pen tests
  • Execute sophisticated email phishing campaigns to increase staff awareness
  • Share findings from engagements through slick, comprehensive reports
    Speakers: Louis Sanchez, Network System Specialist, Cancer Center in the North East | Brian O’Neill, Senior Product Marketing Manager, Rapid7