PDF p.38
In progress
Lure-Based Vectors
Summary
PDF p.38Lure-based vectors use attractive or interesting items to trick users into facilitating an attack. These lures deliver malicious payloads that can give threat actors control over systems or disrupt services.
In plain words
Supplementary — not from your PDFLures are tempting items that trick people into running malicious code: a USB stick left in the car park, a 'free' program, a document or even an image file that exploits the software opening it.
Detailed explanation
PDF p.38-
Lure-Based Attacks
- Definition: Use attractive items to trick users into opening files that deliver malicious payloads.
- Purpose: Gain control over systems or disrupt services.
-
Common Lure Media
-
Removable Device
- Definition: Malware concealed on USB drives or memory cards.
- Method: Trick employees into connecting the device to a PC, laptop, or smartphone.
- Drop Attack: Infected USB sticks left in accessible areas for employees to find and use.
-
Executable File
- Definition: Exploit code hidden in program files.
- Example: Trojan Horse malware that appears useful but creates backdoor access.
-
Document Files
- Definition: Malicious code embedded in word processing or PDF files.
- Method: Exploit scripting features or vulnerabilities in document viewers/editors.
-
Image Files
- Definition: Exploit code within image files targeting browser or document editing software vulnerabilities.
-
Removable Device
-
Attack Surface
- Definition: Points where threat actors can exploit vulnerabilities.
- Reduction: Effective endpoint security management, including vulnerability management, antivirus, program execution control, and intrusion detection.
Important terms
taken from the text above- Lure-Based Attacks
- Use attractive items to trick users into opening files that deliver malicious payloads.
- Removable Device
- Malware concealed on USB drives or memory cards.
- Drop Attack
- Infected USB sticks left in accessible areas for employees to find and use.
- Executable File
- Exploit code hidden in program files.
- Document Files
- Malicious code embedded in word processing or PDF files.
- Image Files
- Exploit code within image files targeting browser or document editing software vulnerabilities.
- Attack Surface
- Points where threat actors can exploit vulnerabilities.
- Reduction
- Effective endpoint security management, including vulnerability management, antivirus, program execution control, and intrusion detection.
Examples & real-world scenarios
Supplementary — not from your PDF- Drop attack: USB sticks labelled 'Salaries 2025' left near the office.
- Trojan: a free utility that also installs a backdoor.
- A document that abuses a flaw in the viewer when it's opened.
Scenario
An employee finds a USB drive in the lobby and plugs it in to find its owner. Training people to hand found media to IT, and blocking unknown USB devices on endpoints, both counter this lure.
Common mistakes
Supplementary — not from your PDF- Assuming only .exe files are dangerous. Documents and images can carry exploits too.
- Treating curiosity as the user's 'fault' rather than something to plan for with technical controls.
Practical skills
Supplementary — not from your PDF- Pick endpoint controls that reduce lure-based risk: execution control, antimalware, device control.
What I should remember
Key Points PDF p.38-
Lure-Based Attacks
- Definition: Attractive items trick users into facilitating attacks.
- Purpose: Control systems, disrupt services.
-
Common Lure Media
- Removable Device: Malware on USB drives/memory cards.
- Executable File: Exploit code in program files (e.g., Trojans).
- Document Files: Malicious code in word/PDF files.
- Image Files: Exploit code in image files.
-
Attack Surface
- Definition: Points of vulnerability exploitation.
- Reduction: Endpoint security management.