Warshipping: Attackers can access corporate networks through the mailroom - Help Net Security

Warshipping: Attackers can access corporate networks through the mailroom - Help Net Security

Most infosecurity professionals have heard of wardialing and wardriving, but what about warshipping?



The expression has been coined by IBM X-Force Red researchers to describe a new attack vector, which consists of covertly delivering to the target’s premises small devices that can be used to gain access to the home or office wireless network and assets connected to it.


The attack


“IBM X-Force Red is always looking to find vulnerabilities or risks before criminals, in order to stay one step ahead. We are currently using warshipping in our pentesting engagements, to help educate our customers about security blind spots and modern ways adversaries can disrupt their business operations or steal sensitive data,” Steve Ocepek, CTO at IBM X-Force Red, told Help Net Security.


“Warshipping is an attack vector no one has considered. A similar, but older tactic was historic ..

Support the originator by clicking the read the rest link below.