In order to play a phishing attack, a dice must be thrown.
This card represents a device that is being dropped at the company and that connects through wifi, cellular or that creates a remote shell back to the attacker’s server. This card requires the attacker to have installed a server in order to connect back. In order for the attacker to be able to play this card, the attacker needs a physical access card or an insider threat card.
Chances of success of this card will increase as the hacker level up its tier.
The name of the card
|
USB Baiting |
|---|---|
|
The card type
|
Social Engineering card type |
|
Whether this card was meant to be played as part of another card
|
Single |
|
Whether this card must be trashed after being player or not
|
Play once |
|
Whether a certain requirement must be met before this card can be played
|
Attacker must have installed a web server in order to play this card. |
|
The ATT&CK tactic this card belongs to
|
Initial Access |
|
The ATT&CK technique this card belongs to
|
|
|
Amount of bitcoins the player needs to pay in order to play this card
|
|
|
The amount of bitcoins the player needs to play to retreat this card
|
|
|
Cards that will counter this card
|
Security Awareness Training Card reduces direct the chances of success of this card. Patching and updating systems reduces indirectly the chances of success of this card. |
|
How rare this card is
|
Low |