{"id":3785,"date":"2024-02-08T15:37:26","date_gmt":"2024-02-08T15:37:26","guid":{"rendered":"https:\/\/qccglobal.com\/?page_id=3785"},"modified":"2024-06-06T14:37:44","modified_gmt":"2024-06-06T14:37:44","slug":"cyber-tscm-case-studies","status":"publish","type":"page","link":"https:\/\/qccglobal.com\/cyber-tscm-case-studies\/","title":{"rendered":"Cyber TSCM Case Studies"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3785\" class=\"elementor elementor-3785\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f151617 e-flex e-con-boxed e-con e-parent\" data-id=\"f151617\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-39272f2 elementor-widget elementor-widget-spacer\" data-id=\"39272f2\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-column .elementor-spacer-inner{height:var(--spacer-size)}.e-con{--container-widget-width:100%}.e-con-inner>.elementor-widget-spacer,.e-con>.elementor-widget-spacer{width:var(--container-widget-width,var(--spacer-size));--align-self:var(--container-widget-align-self,initial);--flex-shrink:0}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container,.e-con>.elementor-widget-spacer>.elementor-widget-container{height:100%;width:100%}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer{height:100%}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner{height:var(--container-widget-height,var(--spacer-size))}.e-con-inner>.elementor-widget-spacer.elementor-widget-empty,.e-con>.elementor-widget-spacer.elementor-widget-empty{position:relative;min-height:22px;min-width:22px}.e-con-inner>.elementor-widget-spacer.elementor-widget-empty .elementor-widget-empty-icon,.e-con>.elementor-widget-spacer.elementor-widget-empty .elementor-widget-empty-icon{position:absolute;top:0;bottom:0;left:0;right:0;margin:auto;padding:0;width:22px;height:22px}<\/style>\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c1b23b3 e-flex e-con-boxed e-con e-parent\" data-id=\"c1b23b3\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-7b64dbb e-con-full e-flex e-con e-child\" data-id=\"7b64dbb\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-39335d0 elementor-widget elementor-widget-image\" data-id=\"39335d0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/4g-data-eavesdropping.webp\" class=\"attachment-large size-large wp-image-9553\" alt=\"4G Data Eavesdropping\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1fc28cb e-con-full e-flex e-con e-child\" data-id=\"1fc28cb\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1a38a87 elementor-widget elementor-widget-heading\" data-id=\"1a38a87\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">4G data eavesdropping\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-721bbce elementor-widget elementor-widget-text-editor\" data-id=\"721bbce\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Whilst conducting a reactive Cyber TSCM inspection of a Data Centre in Eastern Europe for a Fortune 500 Client, QCC identified and located a 4G data modem. The inspection had been requested when the Client became suspicious that detailed technical product information had been leaked and was known to non-authorised parties. The 4G modem had been installed and hidden in the bottom of a rack containing monitoring and control equipment for the data centres air-conditioning systems and fire suppression systems.<\/p><p>The attacker had chosen this rack because it was not directly controlled by our Client and their IT team did not have reason to access it. The 4G data modem was connected to one of the servers in the adjacent rack belonging to our client. The 4G data modem was able to send and receive data to and from the server and wider network including APT malware.<\/p><p>This type of device would not show up during external penetration tests as it was installed inside the client\u2019s network and its deployment location in a 3rd party rack also made the probability of its physical detection very low. QCC conducted cyber forensics analysis of the modem and server and presented the results to the Client who\u2019s legal team subsequently launched a civil legal action against a direct competitor of the Client. QCC has since assisted with evidence preservation and expert witness statements in support of our Client.<\/p><p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\" target=\"_blank\" rel=\"noopener\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/cyber-tscm-services\/\" target=\"_blank\" rel=\"noopener\">cyber TSCM services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dd28d94 e-flex e-con-boxed e-con e-parent\" data-id=\"dd28d94\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c3eccbd elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"c3eccbd\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-divider{--divider-border-style:none;--divider-border-width:1px;--divider-color:#0c0d0e;--divider-icon-size:20px;--divider-element-spacing:10px;--divider-pattern-height:24px;--divider-pattern-size:20px;--divider-pattern-url:none;--divider-pattern-repeat:repeat-x}.elementor-widget-divider .elementor-divider{display:flex}.elementor-widget-divider .elementor-divider__text{font-size:15px;line-height:1;max-width:95%}.elementor-widget-divider .elementor-divider__element{margin:0 var(--divider-element-spacing);flex-shrink:0}.elementor-widget-divider .elementor-icon{font-size:var(--divider-icon-size)}.elementor-widget-divider .elementor-divider-separator{display:flex;margin:0;direction:ltr}.elementor-widget-divider--view-line_icon .elementor-divider-separator,.elementor-widget-divider--view-line_text .elementor-divider-separator{align-items:center}.elementor-widget-divider--view-line_icon .elementor-divider-separator:after,.elementor-widget-divider--view-line_icon .elementor-divider-separator:before,.elementor-widget-divider--view-line_text .elementor-divider-separator:after,.elementor-widget-divider--view-line_text .elementor-divider-separator:before{display:block;content:\"\";border-block-end:0;flex-grow:1;border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--element-align-left .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-left .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-left .elementor-divider__element{margin-left:0}.elementor-widget-divider--element-align-right .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-right .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-right .elementor-divider__element{margin-right:0}.elementor-widget-divider--element-align-start .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-start .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-start .elementor-divider__element{margin-inline-start:0}.elementor-widget-divider--element-align-end .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-end .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-end .elementor-divider__element{margin-inline-end:0}.elementor-widget-divider:not(.elementor-widget-divider--view-line_text):not(.elementor-widget-divider--view-line_icon) .elementor-divider-separator{border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--separator-type-pattern{--divider-border-style:none}.elementor-widget-divider--separator-type-pattern.elementor-widget-divider--view-line .elementor-divider-separator,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:after,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:before,.elementor-widget-divider--separator-type-pattern:not([class*=elementor-widget-divider--view]) .elementor-divider-separator{width:100%;min-height:var(--divider-pattern-height);-webkit-mask-size:var(--divider-pattern-size) 100%;mask-size:var(--divider-pattern-size) 100%;-webkit-mask-repeat:var(--divider-pattern-repeat);mask-repeat:var(--divider-pattern-repeat);background-color:var(--divider-color);-webkit-mask-image:var(--divider-pattern-url);mask-image:var(--divider-pattern-url)}.elementor-widget-divider--no-spacing{--divider-pattern-size:auto}.elementor-widget-divider--bg-round{--divider-pattern-repeat:round}.rtl .elementor-widget-divider .elementor-divider__text{direction:rtl}.e-con-inner>.elementor-widget-divider,.e-con>.elementor-widget-divider{width:var(--container-widget-width,100%);--flex-grow:var(--container-widget-flex-grow)}<\/style>\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b548d5d e-flex e-con-boxed e-con e-parent\" data-id=\"b548d5d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2fed1d4 e-con-full e-flex e-con e-child\" data-id=\"2fed1d4\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ddce568 elementor-widget elementor-widget-image\" data-id=\"ddce568\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/3g-data-eavesdropping.webp\" class=\"attachment-large size-large wp-image-9551\" alt=\"3G Data Eavesdropping\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-08505df e-con-full e-flex e-con e-child\" data-id=\"08505df\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-19443b9 elementor-widget elementor-widget-heading\" data-id=\"19443b9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">3G data eavesdropping\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-630c24e elementor-widget elementor-widget-text-editor\" data-id=\"630c24e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>QCC were called on by a Telecommunications company in India to conduct a Cyber TSCM (CTSCM) inspection in a call centre located in New Delhi after it was discovered that that their customer database had been accessed by an unauthorised person who then sold the customer account information to fraudsters who in turn used the information to fraudulently obtain high value goods including cars, jewellery, designer clothes and loans. The Client could not understand how the database had been accessed out of hours when the offices were closed and CCTV cameras confirmed no one was in the offices at the time of the incident.<\/p>\n<p>QCC conducted the CTSCM inspection and discovered a USB keystroke logger with Wi-Fi capability attached to one of the computers used for processing customer account details. The inspection continued and concealed in a bundle of cabling attached to another computer used to access the database, QCC found a KVM switch linked to a 3G modem.<\/p>\n<p>Further investigation discovered that the database admin user log-in name and password had been captured by the key-logger which then relayed the credentials to the eavesdropper via the Wi-Fi function of the device. The user name and password were then used a few days later to access the other compromised computer via the KVM switch linked to the 3G modem. The customer account information was then simply copied off at will by the information thief, who following a cyber forensics investigation by QCC was found to be over 1400 Km away in Mumbai at the time of the attack.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-917290e e-flex e-con-boxed e-con e-parent\" data-id=\"917290e\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-54663e3 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"54663e3\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9c621ee e-flex e-con-boxed e-con e-parent\" data-id=\"9c621ee\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-da7e049 e-con-full e-flex e-con e-child\" data-id=\"da7e049\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c85a2b1 elementor-widget elementor-widget-image\" data-id=\"c85a2b1\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/wi-fi-man-in-the-middle-attack.webp\" class=\"attachment-large size-large wp-image-9549\" alt=\"Wi-Fi Man in the Middle attack\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c66545a e-con-full e-flex e-con e-child\" data-id=\"c66545a\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-736e96f elementor-widget elementor-widget-heading\" data-id=\"736e96f\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Wi-Fi Man in the Middle attack (MITM)\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-68c3f5b elementor-widget elementor-widget-text-editor\" data-id=\"68c3f5b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>QCC conducted a Cyber TSCM inspection for a Swiss Hedge Fund based in Geneva and uncovered a Wi-Fi Man In The Middle interception attack.<\/p><p>Whilst conducting deep analysis of the Wi-Fi emissions in the Client\u2019s building the QCC Cyber TSCM inspection team detected what appeared initially to be a legitimate Wi-Fi access point, broadcasting a very similar Service Set Identifier (SSID or network name) to the Clients own guest Wi-Fi network. However, when the access point was traced it was found to be located outside the Clients demise, in the electrical riser of the empty office one floor above. QCC operative\u2019s where able to access this riser from below: through the inter-floor riser grating.<\/p><p>What was discovered was a Wi-Fi hacking device also know as a Wi-Fi \u201cMan In The Middle Attack\u201d which fools Wi-Fi enabled, laptops, phones, tablets etc into connecting with the device. This Wi-Fi hacking tool poses as a legitimate Wi-Fi connection by pretending to be a network which is similar to the user\u2019s device, for instance the users home or work network or in this case a work guest network.<\/p><p>Once connected the victims device gets an internet connection via the Wi-Fi \u201cMan In The Middle device\u201d. However all the data traffic that passes through the device is available to the eavesdropper to view or record for nefarious purposes including striping and recording of Passwords, PIN numbers, SSL information, confidential personal information and screen shots of the websites and pages the victims device is accessing.<\/p><p>This attack was clearly a cyber-attack designed to harvest confidential information from un-suspecting user devices, within the Client premises. These Wi-Fi (MITM) devices are openly sold on the internet via hacking websites.<\/p><p>QCC preserved the scene and evidence for later forensics analysis in our forensics laboratory. Full analysis was conducted by QCC\u2019s Cyber Forensics team and the Client, their legal team and security \/ IT team were supported with a Cyber investigation and subsequent legal action and the implementation of security controls to mitigate this risk going forward.<\/p><p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/cyber-tscm-services\/\">cyber TSCM services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-21a9470 e-flex e-con-boxed e-con e-parent\" data-id=\"21a9470\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64a5b1e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"64a5b1e\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2118224 e-flex e-con-boxed e-con e-parent\" data-id=\"2118224\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e70c3f0 e-con-full e-flex e-con e-child\" data-id=\"e70c3f0\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c68a2c0 elementor-widget elementor-widget-image\" data-id=\"c68a2c0\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/bluetooth-keystroke-logger.webp\" class=\"attachment-large size-large wp-image-9555\" alt=\"Bluetooth Keystroke Logger\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d39a57e e-con-full e-flex e-con e-child\" data-id=\"d39a57e\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ccd1abb elementor-widget elementor-widget-heading\" data-id=\"ccd1abb\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Bluetooth keystroke logger<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1170781 elementor-widget elementor-widget-text-editor\" data-id=\"1170781\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>QCC performs periodic inspections of selected meeting rooms and offices for a global mining sector Client at their regional HQ in Santiago, Chile. During a follow-up inspection a USB keystroke logger with Bluetooth was discovered connected between the keyboard and computer of a senior staff member\u2019s desktop computer.\u00a0 This device was capable of recording up to 2 million key presses and can be remotely accessed via Bluetooth. The key-logger records the actual keys pressed in clear text including passwords, user names, pin numbers, emails and any other documents created.<\/p><p>QCC liaised with the Client\u2019s CIO and it was decided to leave the device in place with QCC installing covert CCTV to monitor the area.\u00a0 QCC then researched the device and were able to gain access to the device and view the information that had been stored on it which proved the original installation date. QCC then replaced the key-logger with a new empty identical USB keystroke logger in place of the live device.<\/p><p>Through a program of intercompany misinformation and the use of the covert monitoring equipment, the person responsible was identified when she removed the dummy device. A full report and statement was provided by QCC to the Client HR department to assist in action against the person identified as conducting the surveillance attack.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2e35b99 e-flex e-con-boxed e-con e-parent\" data-id=\"2e35b99\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6fea0e4 elementor-widget elementor-widget-spacer\" data-id=\"6fea0e4\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>4G data eavesdropping Whilst conducting a reactive Cyber TSCM inspection of a Data Centre in Eastern Europe for a Fortune 500 Client, QCC identified and located a 4G data modem. The inspection had been requested when the Client became suspicious that detailed technical product information had been leaked and was known to non-authorised parties. The [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"acf":[],"_links":{"self":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3785"}],"collection":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/comments?post=3785"}],"version-history":[{"count":76,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3785\/revisions"}],"predecessor-version":[{"id":13051,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3785\/revisions\/13051"}],"wp:attachment":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/media?parent=3785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}