In a recent test of a credit union's network security, consultants working for East Syracuse, N.Y.-based security audit firm Secure Network Technologies scattered twenty USB flash drives around the financial group's building. Each memory fob held a program--disguised as an image file--that would collect passwords, user names and information about the user's system. Fifteen of USB drives were picked up by employees, and surprisingly, all fifteen drives were subsequently plugged into credit union computers.
Security Focus