Cyberstudy
PDF p.38 In progress

Lure-Based Vectors

Open PDF at p.38 15 flashcards

Summary

PDF p.38

Lure-based vectors use attractive or interesting items to trick users into facilitating an attack. These lures deliver malicious payloads that can give threat actors control over systems or disrupt services.

In plain words

Supplementary — not from your PDF

Lures are tempting items that trick people into running malicious code: a USB stick left in the car park, a 'free' program, a document or even an image file that exploits the software opening it.

Detailed explanation

PDF p.38
  • Lure-Based Attacks
    • Definition: Use attractive items to trick users into opening files that deliver malicious payloads.
    • Purpose: Gain control over systems or disrupt services.
  • Common Lure Media
    • Removable Device
      • Definition: Malware concealed on USB drives or memory cards.
      • Method: Trick employees into connecting the device to a PC, laptop, or smartphone.
      • Drop Attack: Infected USB sticks left in accessible areas for employees to find and use.
    • Executable File
      • Definition: Exploit code hidden in program files.
      • Example: Trojan Horse malware that appears useful but creates backdoor access.
    • Document Files
      • Definition: Malicious code embedded in word processing or PDF files.
      • Method: Exploit scripting features or vulnerabilities in document viewers/editors.
    • Image Files
      • Definition: Exploit code within image files targeting browser or document editing software vulnerabilities.
  • Attack Surface
    • Definition: Points where threat actors can exploit vulnerabilities.
    • Reduction: Effective endpoint security management, including vulnerability management, antivirus, program execution control, and intrusion detection.

Important terms

taken from the text above
Lure-Based Attacks
Use attractive items to trick users into opening files that deliver malicious payloads.
Removable Device
Malware concealed on USB drives or memory cards.
Drop Attack
Infected USB sticks left in accessible areas for employees to find and use.
Executable File
Exploit code hidden in program files.
Document Files
Malicious code embedded in word processing or PDF files.
Image Files
Exploit code within image files targeting browser or document editing software vulnerabilities.
Attack Surface
Points where threat actors can exploit vulnerabilities.
Reduction
Effective endpoint security management, including vulnerability management, antivirus, program execution control, and intrusion detection.

Examples & real-world scenarios

Supplementary — not from your PDF
  • Drop attack: USB sticks labelled 'Salaries 2025' left near the office.
  • Trojan: a free utility that also installs a backdoor.
  • A document that abuses a flaw in the viewer when it's opened.

Scenario

An employee finds a USB drive in the lobby and plugs it in to find its owner. Training people to hand found media to IT, and blocking unknown USB devices on endpoints, both counter this lure.

Common mistakes

Supplementary — not from your PDF
  • Assuming only .exe files are dangerous. Documents and images can carry exploits too.
  • Treating curiosity as the user's 'fault' rather than something to plan for with technical controls.

Practical skills

Supplementary — not from your PDF
  • Pick endpoint controls that reduce lure-based risk: execution control, antimalware, device control.

What I should remember

Key Points PDF p.38
  • Lure-Based Attacks
    • Definition: Attractive items trick users into facilitating attacks.
    • Purpose: Control systems, disrupt services.
  • Common Lure Media
    • Removable Device: Malware on USB drives/memory cards.
    • Executable File: Exploit code in program files (e.g., Trojans).
    • Document Files: Malicious code in word/PDF files.
    • Image Files: Exploit code in image files.
  • Attack Surface
    • Definition: Points of vulnerability exploitation.
    • Reduction: Endpoint security management.