{"id":3913,"date":"2024-02-13T15:10:30","date_gmt":"2024-02-13T15:10:30","guid":{"rendered":"https:\/\/qccglobal.com\/?page_id=3913"},"modified":"2024-06-06T14:37:01","modified_gmt":"2024-06-06T14:37:01","slug":"tscm-bug-sweeping-case-studies","status":"publish","type":"page","link":"https:\/\/qccglobal.com\/tscm-bug-sweeping-case-studies\/","title":{"rendered":"TSCM \/ Bug Sweeping Case Studies"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3913\" class=\"elementor elementor-3913\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7810d99 e-flex e-con-boxed e-con e-parent\" data-id=\"7810d99\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6c88662 elementor-widget elementor-widget-spacer\" data-id=\"6c88662\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-column .elementor-spacer-inner{height:var(--spacer-size)}.e-con{--container-widget-width:100%}.e-con-inner>.elementor-widget-spacer,.e-con>.elementor-widget-spacer{width:var(--container-widget-width,var(--spacer-size));--align-self:var(--container-widget-align-self,initial);--flex-shrink:0}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container,.e-con>.elementor-widget-spacer>.elementor-widget-container{height:100%;width:100%}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer{height:100%}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner{height:var(--container-widget-height,var(--spacer-size))}.e-con-inner>.elementor-widget-spacer.elementor-widget-empty,.e-con>.elementor-widget-spacer.elementor-widget-empty{position:relative;min-height:22px;min-width:22px}.e-con-inner>.elementor-widget-spacer.elementor-widget-empty .elementor-widget-empty-icon,.e-con>.elementor-widget-spacer.elementor-widget-empty .elementor-widget-empty-icon{position:absolute;top:0;bottom:0;left:0;right:0;margin:auto;padding:0;width:22px;height:22px}<\/style>\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9949ccf e-flex e-con-boxed e-con e-parent\" data-id=\"9949ccf\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e6a0084 e-con-full e-flex e-con e-child\" data-id=\"e6a0084\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2b5c46a elementor-widget elementor-widget-image\" data-id=\"2b5c46a\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/gsm-bug.webp\" class=\"attachment-large size-large wp-image-9865\" alt=\"GSM Bug\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bca2eae e-con-full e-flex e-con e-child\" data-id=\"bca2eae\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1540630 elementor-widget elementor-widget-heading\" data-id=\"1540630\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">GSM bug\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5d1a53e elementor-widget elementor-widget-text-editor\" data-id=\"5d1a53e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>During a TSCM inspection of a FORTUNE 500 company\u2019s HQ QCC\u2019s sweep team discovered a GSM bug deep fitted in a laptop docking station on the CFO\u2019s desk.<\/p>\n<p>The docking station had been bespoke modified with the GSM \/ 3G bug which contained a covert microphone to remotely listen to clear room audio from the CFO\u2019s office. The bug was also connected to both the power supply of the docking station to power the bug indefinitely and to the RJ45 network port inside the docking station which gave the eavesdropper remote access to the corporate computer network either to steal company data or deploy APT (Advanced Persistent Threat) malware.<\/p>\n<p>Review of the situation with the CFO flagged that for the previous 6 months the CFO had been heavily involved in negotiations with an Asian government regarding a multi-billion dollar project the company wished to undertake in that region. QCC advised the CFO on protective security improvements going forward to control and monitor the offices including proactive ongoing TSCM inspections to counter the threat of eavesdropping occurring again.<\/p>\n<p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/tscm-services\/\">TSCM services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4f2d91c e-flex e-con-boxed e-con e-parent\" data-id=\"4f2d91c\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5e7fe9c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"5e7fe9c\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.22.0 - 17-06-2024 *\/\n.elementor-widget-divider{--divider-border-style:none;--divider-border-width:1px;--divider-color:#0c0d0e;--divider-icon-size:20px;--divider-element-spacing:10px;--divider-pattern-height:24px;--divider-pattern-size:20px;--divider-pattern-url:none;--divider-pattern-repeat:repeat-x}.elementor-widget-divider .elementor-divider{display:flex}.elementor-widget-divider .elementor-divider__text{font-size:15px;line-height:1;max-width:95%}.elementor-widget-divider .elementor-divider__element{margin:0 var(--divider-element-spacing);flex-shrink:0}.elementor-widget-divider .elementor-icon{font-size:var(--divider-icon-size)}.elementor-widget-divider .elementor-divider-separator{display:flex;margin:0;direction:ltr}.elementor-widget-divider--view-line_icon .elementor-divider-separator,.elementor-widget-divider--view-line_text .elementor-divider-separator{align-items:center}.elementor-widget-divider--view-line_icon .elementor-divider-separator:after,.elementor-widget-divider--view-line_icon .elementor-divider-separator:before,.elementor-widget-divider--view-line_text .elementor-divider-separator:after,.elementor-widget-divider--view-line_text .elementor-divider-separator:before{display:block;content:\"\";border-block-end:0;flex-grow:1;border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--element-align-left .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-left .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-left .elementor-divider__element{margin-left:0}.elementor-widget-divider--element-align-right .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-right .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-right .elementor-divider__element{margin-right:0}.elementor-widget-divider--element-align-start .elementor-divider .elementor-divider-separator>.elementor-divider__svg:first-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-start .elementor-divider-separator:before{content:none}.elementor-widget-divider--element-align-start .elementor-divider__element{margin-inline-start:0}.elementor-widget-divider--element-align-end .elementor-divider .elementor-divider-separator>.elementor-divider__svg:last-of-type{flex-grow:0;flex-shrink:100}.elementor-widget-divider--element-align-end .elementor-divider-separator:after{content:none}.elementor-widget-divider--element-align-end .elementor-divider__element{margin-inline-end:0}.elementor-widget-divider:not(.elementor-widget-divider--view-line_text):not(.elementor-widget-divider--view-line_icon) .elementor-divider-separator{border-block-start:var(--divider-border-width) var(--divider-border-style) var(--divider-color)}.elementor-widget-divider--separator-type-pattern{--divider-border-style:none}.elementor-widget-divider--separator-type-pattern.elementor-widget-divider--view-line .elementor-divider-separator,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:after,.elementor-widget-divider--separator-type-pattern:not(.elementor-widget-divider--view-line) .elementor-divider-separator:before,.elementor-widget-divider--separator-type-pattern:not([class*=elementor-widget-divider--view]) .elementor-divider-separator{width:100%;min-height:var(--divider-pattern-height);-webkit-mask-size:var(--divider-pattern-size) 100%;mask-size:var(--divider-pattern-size) 100%;-webkit-mask-repeat:var(--divider-pattern-repeat);mask-repeat:var(--divider-pattern-repeat);background-color:var(--divider-color);-webkit-mask-image:var(--divider-pattern-url);mask-image:var(--divider-pattern-url)}.elementor-widget-divider--no-spacing{--divider-pattern-size:auto}.elementor-widget-divider--bg-round{--divider-pattern-repeat:round}.rtl .elementor-widget-divider .elementor-divider__text{direction:rtl}.e-con-inner>.elementor-widget-divider,.e-con>.elementor-widget-divider{width:var(--container-widget-width,100%);--flex-grow:var(--container-widget-flex-grow)}<\/style>\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cd7bdd8 e-flex e-con-boxed e-con e-parent\" data-id=\"cd7bdd8\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ee098ce e-con-full e-flex e-con e-child\" data-id=\"ee098ce\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9609e56 elementor-widget elementor-widget-image\" data-id=\"9609e56\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/rf-transmitter.webp\" class=\"attachment-large size-large wp-image-9867\" alt=\"RF Transmitter\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf3a298 e-con-full e-flex e-con e-child\" data-id=\"bf3a298\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1fb1506 elementor-widget elementor-widget-heading\" data-id=\"1fb1506\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">RF transmitter\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5f6b9ff elementor-widget elementor-widget-text-editor\" data-id=\"5f6b9ff\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>While QCC was conducting a regular counter-eavesdropping inspection of a global banking corporation HQ in Toronto, Canada we discovered an RF signal coming from a working Blackberry USB phone charger plugged in under a meeting room table. The lead of the USB charger came up through the table and it was used by staff to top-up charge Blackberry\u2019s during meetings. When QCC checked, we found that all of the meeting rooms had the same chargers installed for staff to use but this charger was the only one emitting RF at 427.5MHz. QCC used our radio spectrum analyser to listen to the transmission and found it was indeed transmitting room audio from the meeting room.<\/p>\n<p>Further investigation of the device proved that a tiny Russian radio transmitter and covert microphone had been custom fitted inside the charger so that as a bug it did not look out of place in the meeting room. QCC installed a covert camera in the meeting room and 2 weeks later a disgruntled member of staff based at the site was caught trying to remove the bug. The rogue member of staff who had bugged the room was questioned and said he was unhappy with his pay rise and was bugging the ongoing HR meetings with other staff members to see what they had been awarded.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0446fe5 e-flex e-con-boxed e-con e-parent\" data-id=\"0446fe5\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-45d20e6 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"45d20e6\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f5c0274 e-flex e-con-boxed e-con e-parent\" data-id=\"f5c0274\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-33dc13a e-con-full e-flex e-con e-child\" data-id=\"33dc13a\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2ad3abd elementor-widget elementor-widget-image\" data-id=\"2ad3abd\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/wi-fi-tv-tscm.webp\" class=\"attachment-large size-large wp-image-9873\" alt=\"Wi-Fi TV TSCM\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9356d31 e-con-full e-flex e-con e-child\" data-id=\"9356d31\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1dfdef4 elementor-widget elementor-widget-heading\" data-id=\"1dfdef4\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Wi-Fi TV\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ae629c elementor-widget elementor-widget-text-editor\" data-id=\"6ae629c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>During the TSCM inspection of a FTSE 100 company\u2019s regional offices in the Caribbean, QCC identified the TV in the Chief Legal Officer\u2019s office as having been used to eavesdrop on the CLO.<\/p>\n<p>The TV was connected to the LAN via a CAT5 cable but also its Wi-Fi function had been enabled. When QCC analysed the TV\u2019s Wi-Fi and any connected devices we discovered a second Wi-Fi signal coming from the TV with a very similar SSID name to the first SSID. On further examination of the TV we found that it had been modified with the internal installation of a Wi-Fi store and forward device and covert microphone which could capture clear room audio and store it for download via the Wi-Fi link and subsequent review at a later time by the eavesdropper.<\/p>\n<p>QCC connected a write blocked cyber forensics laptop to the fake TV Wi-Fi connection and found that we could access the digital memory of the store and forward device where we initially found no digital audio recordings. Further cyber forensics eventually uncovered 37 digital audio recordings going back over a 7-week period which had been downloaded and then deleted from the device by the eavesdropped but which were still present in unallocated space within the devices memory.<\/p>\n<p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/bug-sweeping-services\/\">Bug sweeping services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f74563f e-flex e-con-boxed e-con e-parent\" data-id=\"f74563f\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-023ae11 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"023ae11\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9e12eab e-flex e-con-boxed e-con e-parent\" data-id=\"9e12eab\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-58ee230 e-con-full e-flex e-con e-child\" data-id=\"58ee230\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b5bb38e elementor-widget elementor-widget-image\" data-id=\"b5bb38e\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/covert-microphones.webp\" class=\"attachment-large size-large wp-image-9863\" alt=\"Covert Microphones\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f3d15a3 e-con-full e-flex e-con e-child\" data-id=\"f3d15a3\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f5d2fb6 elementor-widget elementor-widget-heading\" data-id=\"f5d2fb6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Covert microphones<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9f5e95 elementor-widget elementor-widget-text-editor\" data-id=\"a9f5e95\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>QCC were engaged to perform a counter surveillance sweep for a FTSE 100 Client who had just completed the takeover of another large European company.\u00a0 QCC inspected the offices of the acquired company in Paris and during the physical inspection of the two main conference rooms we discovered two covert Knowles microphones and cabling in the suspended ceilings of the rooms proving an active surveillance operation had been in place prior to the inspection. The location of the microphones and cabling also proved that someone had unsuccessfully tried to remove the attacks in a hurry.<\/p><p>This find was particularly important as the meeting rooms which had been subject to the bugging had been used to discuss the details and strategy of the takeover.<\/p><p>Following the sweep, the Client decided to move from these offices to a new building.<\/p><p>This case illustrates the importance of a thorough physical search, the only way possible of finding and identifying these covert microphones ends and small pieces of broken cable.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e8924fa e-flex e-con-boxed e-con e-parent\" data-id=\"e8924fa\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9c37364 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"9c37364\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-df0510d e-flex e-con-boxed e-con e-parent\" data-id=\"df0510d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-c09c1a4 e-con-full e-flex e-con e-child\" data-id=\"c09c1a4\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa1ecd6 elementor-widget elementor-widget-image\" data-id=\"aa1ecd6\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/telephone-taps.webp\" class=\"attachment-large size-large wp-image-9869\" alt=\"Telephone Taps\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1f6098e e-con-full e-flex e-con e-child\" data-id=\"1f6098e\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f389e08 elementor-widget elementor-widget-heading\" data-id=\"f389e08\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Telephone taps\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b240acb elementor-widget elementor-widget-text-editor\" data-id=\"b240acb\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>An international law firm engaged QCC to conduct a TSCM inspection (bug sweep) of selected offices and meeting rooms within their Swiss headquarters. The Client suspected eavesdropping after confidential information relating to financial negotiations was leaked.\u00a0 Initial investigations ruled out some common causes of information loss and QCC were asked to sweep the areas in which this confidential information had been discussed.<\/p><p>During the inspection QCC tested the digital telephone system and discovered analogue audio present on spare cables from the telephones in three of the target meeting rooms. Audio was present when the telephones were both on hook and off hook meaning room audio was being passed constantly down a spare pairs of wires out of the rooms.<\/p><p>QCC traced the cables and found that the structured cabling had been and modified and the spares wires had been diverted to terminal blocks under the sub floor within the IT equipment room. This modification was used to connect suitable recorders to the spare pairs containing the room audio.<\/p><p>Inside staff were suspected to be involved in this spying operation and without QCC\u2019s covert handling of the inspection arrangements the spies could well have removed the devices before they were discovered. Other QCC specialist monitoring services were then used and 8 weeks later the eavesdropper was caught and admitted what had been going on.<\/p><p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/tscm-services\/\">TSCM services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-111e52a e-flex e-con-boxed e-con e-parent\" data-id=\"111e52a\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a9e4710 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"a9e4710\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3376d6d e-flex e-con-boxed e-con e-parent\" data-id=\"3376d6d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-66f57ec e-con-full e-flex e-con e-child\" data-id=\"66f57ec\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6765c66 elementor-widget elementor-widget-image\" data-id=\"6765c66\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/tscm-cars-jets-yachts.webp\" class=\"attachment-large size-large wp-image-9871\" alt=\"TSCM Cars Jets &amp; Yachts\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a47bd34 e-con-full e-flex e-con e-child\" data-id=\"a47bd34\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7d93c37 elementor-widget elementor-widget-heading\" data-id=\"7d93c37\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Cars, jets & yachts<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-51856f1 elementor-widget elementor-widget-text-editor\" data-id=\"51856f1\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>The Chairman of an international media company employed QCC to carry out TSCM inspections of the chairman\u2019s transport fleet including inspections of two executive cars, a superyacht moored in the Mediterranean and a 12 seat executive jet hangered in the UK.<\/p><p>The inspection of the yacht discovered an historic eavesdropping attack within the main stateroom of the vessel. The solid state recorder bug found had corroded batteries and could have been in place for up to 2 years following a refit. \u00a0On digital forensic examination the bug was found to hold recordings of conversations between 15 and 18 months before. QCC removed the device on the Clients instruction and now conducts regular inspections to maintain a suitable security stance for the Client.<\/p><p>The inspection of the jet discovered that the installed Wi-Fi system on-board was completely unsecured allowing interception of emails and data transmissions to and from the passenger\u2019s laptops and tablet computers. QCC advised the Client on securing the systems involved including secure protocols for their use going forward.<\/p><p>The inspection of the 2 executive cars identified the unsecured Bluetooth wireless telephone systems installed leaving phone calls vulnerable to interception. QCC reconfigured the systems involved and installed handsets for secure use.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8c35622 e-flex e-con-boxed e-con e-parent\" data-id=\"8c35622\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa08ebd elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"aa08ebd\" data-element_type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0d0ad44 e-flex e-con-boxed e-con e-parent\" data-id=\"0d0ad44\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-eefe06a e-con-full e-flex e-con e-child\" data-id=\"eefe06a\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ae067c9 elementor-widget elementor-widget-image\" data-id=\"ae067c9\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/qccglobal.com\/wp-content\/uploads\/2024\/05\/bug-sweeping-services.webp\" class=\"attachment-large size-large wp-image-9861\" alt=\"Bug Sweeping Services\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9080e3a e-con-full e-flex e-con e-child\" data-id=\"9080e3a\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-98292d4 elementor-widget elementor-widget-heading\" data-id=\"98292d4\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Trackers & homes\t\n<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-11d2dc3 elementor-widget elementor-widget-text-editor\" data-id=\"11d2dc3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>A Client who was the subject of significant level of press intrusion instructed QCC to provide support to counter the threat to his privacy. QCC carried out a risk assessment and proposed an inspection of the London residence and vehicle used by the Client.<\/p><p>During the vehicle TSCM inspection QCC discovered a live GPS tracking device had been attached to the rear of the vehicle which incorporated a GSM capability that enabled the eavesdropper to live track the principles vehicle. The device was removed and passed to the Clients solicitors who have made representations to the press complaints commission.<\/p><p>The security assessment of the London apartment revealed a failed attempt to gain access by a person posing as a pest control operative in the days previous. The concierge at the apartments block had refused entry as the building did not employ a pest control contractor and no appointment had been made. The concierge also became suspicious as the man claiming to be from the pest control company arrived as the passenger on a motorcycle (this was observed on perimeter CCTV) only a few minutes after the Client had left the building in the car containing the tracking device. QCC advised the Client on improving security procedures and now conducts regular TSCM inspections of the car and other sites relating to the Client.<\/p><p><strong><a href=\"https:\/\/www.qccglobal.com\/contact-us\/\">Contact us<\/a><\/strong>\u00a0for further advice or return to\u00a0<strong><a href=\"https:\/\/www.qccglobal.com\/bug-sweeping-services\/\">Bug Sweeping services page<\/a>.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d83b1d9 e-flex e-con-boxed e-con e-parent\" data-id=\"d83b1d9\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2b0ddfc elementor-widget elementor-widget-spacer\" data-id=\"2b0ddfc\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>GSM bug During a TSCM inspection of a FORTUNE 500 company\u2019s HQ QCC\u2019s sweep team discovered a GSM bug deep fitted in a laptop docking station on the CFO\u2019s desk. The docking station had been bespoke modified with the GSM \/ 3G bug which contained a covert microphone to remotely listen to clear room audio [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"acf":[],"_links":{"self":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3913"}],"collection":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/comments?post=3913"}],"version-history":[{"count":20,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3913\/revisions"}],"predecessor-version":[{"id":13045,"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/pages\/3913\/revisions\/13045"}],"wp:attachment":[{"href":"https:\/\/qccglobal.com\/wp-json\/wp\/v2\/media?parent=3913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}