Alpine Security Live Hacking & Professional …€¢Exam Vouchers included •Exam Pass Guarantee •Private and Custom courses available •Dynamic and fun trainers ... CSCU –Certified

WWW.ALPINESECURITY.COM 1

Alpine Security Live Hacking &

Professional Development Event

Presented by Alpine SecurityChristian Espinosa

[email protected]

Objectives

• Generate Interest in our Cybersecurity Training

• Announce EC-Council Partnership

• Introduce New EC-Council Course Offerings

• Live Hacking Demonstrations

• Discuss Social Engineering

• Questions

Technical Level – Moderate


Overview

• Alpine Security Background

• EC-Council Partnership

• New Course Offering Overviews

• Context – Social Engineering

• Hacking Demonstrations

• Course Relevance

• Questions – any time


How many CPEs is this thing?

1

Alpine Security Background

• Service Disabled Veteran Owned Small Business (SDVOSB)

• Areas of Focus:• Cybersecurity Training• Penetration Testing• Incident Response• Cybersecurity Strategy• Audits, based on Top 20 Critical

Security Controls


www.alpinesecurity.com

Cybersecurity Training Differentiators

• All of our trainers are practitioners with real-world experience

• EC-Council Accredited Training Center (ATC)

• CompTIA Authorized Delivery Partner

• Both Live Online and Live In-Person Training

• Exam Vouchers included

• Exam Pass Guarantee

• Private and Custom courses available

• Dynamic and fun trainers


EC-Council ATC

• Official EC-Council curriculum

• Access to latest EC-Council materials

• Onsite Exam administration


New Courses

• ECSAv9 (EC-Council Certified Security Analyst)

• CND (Certified Network Defender)

• CSCU (Certified Secure Computer User)


Course schedule on website and brochure

ECSAv9 – EC-Council Certified Security Analyst

• 5 Day, 70% Hands-On Course

• Progression Certified Ethical Hacker (CEH)

• Goal is to provide a practical-based certification• Reduces paper tigers

• Exam has two parts:• 60 Day practical – perform a penetration test and

submit a report

• If pass the practical – 150 question multiple choice exam (70% to pass)


CND – Certified Network Defender

• 5 Day, Hands-On Course

• Skills-based course, based on the National Initiative of Cybersecurity Education (NICE)

• Mapped to roles and responsibilities for DoD system and network administrators

• Complements CEH and ECSA• Offense vs Defense

• Exam:• 100 Multiple Choice Questions• 4 hours long


CSCU – Certified Secure Computer User

• 2 Day course, can be shortened

• Designed for “users”

• Fulfills User Awareness Training Requirements

• Exam:• 50 Multiple Choice

• 2 hours long

• 70% passing


Password Demo


iLabs – online Cyber Range

• Most of our courses come with an iLabs subscription


iLabs Demo


State of Affairs


Tools

Skill

Time

5 Step HackingDemo


Context

• CEH and ECSA – skills to run these attacks and more

• CND – skills to protect, detect, and respond

• CSCU – increased awareness


Social Engineering – Hacking Humans

• Social engineering exploits human behaviors and trust

• It is often easier to exploit human vulnerabilities than computer or network vulnerabilities

• Why it works –• People want to be helpful

• People want to be liked

• People want to comply with figures of authority

• People don’t always think clearly under stress

• People are curious


Thumb Drive Drop

• Attacker places malicious files on a thumb drive and drops the thumb drive(s) around the target facility

• Files often given provocative names, like payroll or layoff information

• Several thumb drives may be used and dropped in different locations, to increase the likelihood that someone will use it


2017 Layoff Campaign


Distribution – 5 Drives


2017 Layoff Campaign Payload

• Reverse Meterpreter Shell that automatically ran “winenum” script to gather info on target• Allowed remote access

• Tunneled traffic (not encrypted) over TCP Port 53 (DNS)

• Benign, due to ROE

• Why Reverse Shell?


winenum


Results


Scope Creep


Thumb Drive Drop Results

• Objectives Met

• 5 Thumb Drives left

• 250+ people infected• We closed down the C2 server when the ROE window closed

• Client was unhappy and frustrated• Users broke several policies

• Inserted unofficial thumb drives

• Opened unofficial files

• Clicked “Enable Content”

• Copied file marked “sensitive” and emailed it


Phishing Campaign Objectives

• Steal Credentials

• Measure “clicks”


Phishing -Non Discrimination Policy Update

27


Phishing Campaigns

• Stolen Credentials (Non-Discrimination Policy)• 11 out of 30 people

• 37%

• Clicks (LinkedIn Invite)• 16 out of 25 people

• 64%

• Only sent to males


SET Demo


Context

• CEH and ECSA – skills to run these attacks and more

• CND – skills to protect, detect, and respond

• CSCU – increased awareness!


Summary

• Alpine Security Background

• EC-Council Partnership

• New Course Offering Overviews

• Context – Social Engineering

• Hacking Demonstrations

• Course Relevance

• Questions


Christian [email protected]

www.alpinesecurity.com


Documents

Alpine Security Live Hacking & Professional …€¢Exam Vouchers included •Exam Pass Guarantee •Private and Custom courses available •Dynamic and fun trainers ... CSCU –Certified