Chapter 30 Social Engineering

In the late '70s, a young man named Stanley Mark Rifkin successfully committed one of the biggest bank robberies in history.

Amazingly, Stanley did not hire helpers, did not use weapons, did not have a seamless plan of action, or even the assistance of a computer, but simply relied on a chance to enter the wire transfer room and make three phone calls to transfer $10.2 million to his personal account abroad.

What's even more strange is that this incident ended up being included in the Guinness Book of World Records under the title of "the largest computer fraud case in history".

The deception technique used by Stanley Refkin, which we call "social engineering", has gradually developed and been widely used by hackers, who exploit people's psychological weaknesses, behavioral weaknesses, or loopholes in rules and regulations to attack, in order to obtain the information that the attacker wants, these methods can be called social engineering.

Zhang Xiaohua asked the evil sword to guess the password, and the evil sword asked Zhang Xiaohua for information such as birthdays based on previous experience, and then made the most likely combination to try to guess the password, which is social engineering. Speaking of which, the last time Liu Xiao installed a USB flash drive Trojan horse on Zhang's computer to carry out a ferry attack, and later answered an extension on Zhang Chunsheng's phone, this can be regarded as social engineering.

However, with the enhancement of people's awareness of prevention, as well as the gradual improvement of various rules and regulations, the role that social engineering can play in hacking is becoming more and more limited, and the success of social engineering is based on the collection of a large amount of information.

But Zhang Xiaohua has strongly proved her point of view, that is, the so-called security attack and defense platform of the evil sword, it is impossible to test the true level of a security personnel. Liao's platform has not yet been formed, and it has already failed for more than half of it, which is not light.

Everyone has nothing to say, because Zhang Xiaohua's password can even be guessed by a child, how can it be regarded as a difficult evil sword. Zhang Xiaohua was very proud, picked up the child, "Let's go, it's really good, my sister will buy you delicious and fun!", and then walked away. Liu Xiao had no choice but to walk over and put away Zhang Xiaohua's computer, shook his head, and left the press conference.

Liao's press conference made Zhang Xiaohua so troubled that she couldn't continue, the media seized the opportunity to fire one after another, and the questions asked basically mean the same thing, since this platform has been proven to be unable to measure the true level of security personnel, what remedies will Liao's have, and will the plan of this platform continue?

Xiao Zhengsheng's old face was blue, and he immediately left the scene, leaving only the evil sword there to deal with the media.

After Zhang Chunsheng learned the news from Liu Xiao's mouth, he was so happy that he jumped high in the office, and there was only one sentence in his mouth, "Tiger father has no dog girl! Tiger father has no dog girl!", after a long time, he reacted, and directly called the procurement department, the new sports car promised Zhang Xiaohua last time, he decided to cash it now, and he will cash it out immediately.

This incident also touched Liu Xiao a lot, Zhang Xiaohua, as a computer idiot, could stump such a top hacker as the evil sword so easily, which shows that Zhang Xiaohua has put a lot of thought into it, but on the other hand, it also shows that the hackers themselves have been deeply involved in social engineering and can't extricate themselves, the reason why the evil sword can't guess is because he himself has also entered a habit of thinking, as soon as he sees the password, he habitually thinks of the birthday, name, phone number, and will not think of anything else.

It's Liu Xiao himself, if it weren't for Zhang Xiaohua's early prompt, he would definitely not be able to guess this password, Liu Xiao felt terrible for his solidified thinking mode, he decided to improve social engineering here, if you want to have a high hit rate, at least you have to summarize the different habits of men and women in designing passwords, and then you can continue to refine it, which is definitely helpful for your future analysis and collection of analysis data.

Later, Long Izumo came back, and there was a trace of worry on his Maitreya Buddha-like face in the past, and Liu Xiao knew that he must not have a good conversation with the evil sword.

Liu Xiao went over to inquire, only to know that the Liao family might terminate the evil sword's project, and the evil sword was furious, because Zhang Xiaohua ordered Long Izumo to be the referee at the press conference, and the evil sword thought that today's incident was that Long Izumo and Zhang Xiaohua partnered to show their foreign appearance, so they blamed Long Izumo as well. Long Izumo talked to the evil sword, and he was basically choked back, not to mention the matter of reconciliation.

Long Izumo looked very sad, and said goodbye to Liu Xiao in a hurry at the moment, and returned to Haicheng with Lan Shenghua, and asked Liu Xiao to pay attention to preventing the evil sword's revenge, it is estimated that he is in such a hurry to return to Haicheng, and it is probably also arranged, who knows if the evil sword will retaliate more frantically against the soft alliance, the soft alliance is professional and safe, and the impact is no less than the failure of the evil sword's press conference.

Liu Xiao was even more depressed than Long Izumo, the evil sword completely lost his mind at the moment, he was really defeated by Zhang Xiaohua, a layman, and he was defeated openly, Zhang Xiaohua fulfilled her promise, and she took revenge. Liu Xiao had to reflect on himself, he knew more about hacking techniques than Zhang Xiaohua, Zhang Xiaohua used hacking techniques to defeat the evil sword, but he was still waiting for the opportunity to fight the evil sword again, in comparison, his own insider was not as good as Zhang Xiaohua's layman.

"What is wrong with me? Is it mentality? Is it character? Or have I always been in awe of these top hackers?" Liu Xiao asked himself in his heart, perhaps, what he really is worse is the spirit of Zhang's father and daughter, no matter how strong and insidious the opponent is, they will not back down, just like a wolf being bitten by a lion, this wolf not only will not run for his life, but will bite back even more desperately, giving the opponent two or even more. If the Liao family suppressed the Zhang family, which was still very weak, Zhang Chunsheng began to escape, change careers or retreat, then there would not be a situation where the Zhang and Liao families are big today.

The day after the press conference, Wen Qing came with OTE people, a team of seven or eight people, Wen Qing said that this is a team dedicated to investigating and collecting information. The team seemed to have carefully studied Liu Xiao's plan, and had a basic understanding of Zhang's business and corporate structure, and after taking the documents signed by Zhang Chunsheng, they dispersed to Zhang's branch to investigate on the spot, leaving only Wen Qing and another person responsible for the investigation of the headquarters and Chunsheng Hotel.

Wen Qing took a turn in Zhang's this time, and the surprise in his heart was no less than Liu Xiao a long time ago, such a large enterprise as Zhang's actually relied on a few printing computers to maintain daily administrative operations, without computers, Wen Qing didn't know how to turn the earth.

Liu Xiao smiled, "Mr. Wen smiled, probably didn't expect our Zhang's office level to be so backward, right?"

Wen Qing didn't come back to his senses, shook his head, and said, "No, no, this is not the most inefficient place I have ever seen." ”

Liu Xiao was a little curious, "No, is there anything worse than our Zhang family?"

"Before we didn't intervene, the CIA was much less efficient than you!" Wen Qing smiled, turned around and continued to walk forward.

Liu Xiao was stupid, and stood in place for a long time without coming back to his senses.

OTE doesn't seem to shy away from Liu Xiao, no matter what he does, he doesn't avoid Liu Xiao at all. Wenqing's investigation methods are actually similar to Liu Xiao's before, but their questionnaire is much more detailed than Liu Xiao's, each person carries a notebook, on which there is an information entry software, as soon as the user's survey results are submitted, the software will conduct a comprehensive analysis, in this way, the final information obtained is very different from Liu Xiao's before, this software can even analyze a person's psychological personality traits and work habits according to the questionnaire answers. This made Liu Xiao's eyes wider, and the professional is different.

Two or three days later, the OTE team returned to Fengming one after another, and Wenqing was ready to say goodbye again, they wanted to bring the information collected in Zhexi back to the company, and after a number of professional teams studied and analyzed, they formulated a system design plan.

Liu Xiao was a little puzzled, "It seems that you are all understanding the structure of the enterprise these days, but you rarely seem to ask about the operation mode of the enterprise. ”

"That's why I say your plan is failing. Wen Qing smiled, "Do you think the Zhang family's current mode of operation is efficient?"

Liu Xiao shook his head, "It's not too high!"

"That's right!" Wen Qing's head bowed, "Your previous plan, the reason why it failed, is because you don't understand the operation of the enterprise at all, and you don't know how to improve the operation efficiency of the enterprise, you just stand in the perspective of system design, let the system deliberately adapt to the backward mode of operation, then even if your system is advanced, no matter how high the technology content, you can not provide a strong operating power for the enterprise." ”

Liu Xiao realized a little, he had indeed ignored this problem before, and took it for granted, thinking that after configuring the enterprise decision-making system, Zhang's enterprise efficiency would naturally improve.

Wen Qing patted Liu Xiao on the shoulder, "Judging from the technique alone, you are already very powerful, but we are more professional than you." Rest assured, we OTE has the best management consulting team in the world, and will re-design a new operation model for Zhang's, including Zhang's existing departments, which may have to be reintegrated and divided. ”

Liu Xiao didn't expect it to be so troublesome, thought for a moment, and gritted his teeth, "Okay, I'll talk about it." ”

"In fact, your chairman Zhang is very powerful, he can hand over such a big project to you, this courage is very remarkable, the success or failure of an enterprise often depends on the bearing and courage of his head. Wen Qing paused, "However, we will do it according to your meaning of 'to do the best', and when this system is completed, I can guarantee that Zhang's is definitely one of the most efficient enterprises in China." ”

Liu Xiao said with a smile: "If you say this, I'll go to him now to talk about this matter, I hope it won't be too long for you to come to Feng Ming next time." ”

"It's going to be soon!"

PS: The later plot has been redesigned.