BlackJacking: Yay! Now I control your enterprise
There’s a new term on the Internet and it’s called BlackJacking - using your BlackBerry to hack into a company’s ivory tower and get the latest gossip about their CEO.
Jesse D’Aguanno, director of security research at German firm Praetorian Global, gave a presentation on how to use the BlackBerry environment to circumvent perimeter defenses and directly attack hosts on a corporate intranet at last week’s DefCon conference in Vegas. The demo included a live presentation. Next week D’Aguanno plans to release source code for BBProxy, the tool used to conduct the attack, which he describes as “Blackjacking”.
What does this mean? Well, if your company doesn’t allow several fun things on your network, then be prepared for more trimming:
“Only those connections necessary to facilitate the operation of the BlackBerry server should be permitted. The BlackBerry server should not be permitted to open arbitrary connections to the internal network or internet. The mail server that is working with the BlackBerry server… should also be isolated on it’s own separate DMZ,” he added.
You can read the full story here.
Tags: BlackBerry, BlackJackingRelated Stories
POSTED IN: BlackBerry, BlackJacking, Mobile Monitor
0 opinions for BlackJacking: Yay! Now I control your enterprise
No one has left a comment yet. You know what this means, right? You could be first!
Have an opinion? Leave a comment: