Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Nearest Neighbor Attack

volexity.com

Post reply on HN
Print view View original

11–20 of 73 posts

Re: The Nearest Neighbor Attack

#11

Post by Rygian »

> Volexity now determined the attacker was connecting to the network via wireless credentials they had brute-forced from an Internet-facing service. However, it was not clear where the attacker was physically that allowed them to connect to the Enterprise Wi-Fi to begin with. Further analysis of data available from Organization A’s wireless controller showed which specific wireless access points the attacker was connecting to and overlayed them on a map that had a layout of the building and specific floors.

This is the kind of hackery I'd enjoy seeing in a blockbuster movie.

Re: The Nearest Neighbor Attack

#13

Post by voidUpdate »

_hl_ wrote: post #9

What’s wrong with the tried-and-tested technique of flying a guy or girl over there to drop a small gadget in WiFi proximity?

Russia is quite far away to send a plane small enough to fly low over the building and drop a device onto the roof, and I don't think you're allowed to throw things out of an airliner window anyway

Re: The Nearest Neighbor Attack

#14

Post by _hl_ »

voidUpdate wrote: post #13
_hl_ wrote: post #9

What’s wrong with the tried-and-tested technique of flying a guy or girl over there to drop a small gadget in WiFi proximity?

Russia is quite far away to send a plane small enough to fly low over the building and drop a device onto the roof, and I don't think you're allowed to throw things out of an airliner window anyway

I mean a normal passenger on a normal plane making a normal trip to an office building and finding a hidden location where to tape a small box with an arduino in it. Maybe even on the outside so you can use solar power? Though it only needs to last long enough to compromise a machine inside the network.

This would be nothing new, I remember ages ago in the days of WEP that you could buy a small box that would collect enough handshakes to let you crack the WEP password.

Re: The Nearest Neighbor Attack

#16

Post by RGamma »

thrdbndndn wrote: post #5
kmeisthax wrote: post #2

So, as I understand it, you 0wn a machine in one organization, then use it to tunnel over to Wi-Fi in the building next door, 0wn another machine there, rinse and repeat until you've created the world's least consensual mesh network?

why do you type 0wn (zero) instead of own?

Cuz it's k00l

Re: The Nearest Neighbor Attack

#17

Post by voidUpdate »

_hl_ wrote: post #14
voidUpdate wrote: post #13

Earlier quoted context omitted.

Russia is quite far away to send a plane small enough to fly low over the building and drop a device onto the roof, and I don't think you're allowed to throw things out of an airliner window anyway

I mean a normal passenger on a normal plane making a normal trip to an office building and finding a hidden location where to tape a small box with an arduino in it. Maybe even on the outside so you can use solar power? Though it only needs to last long enough to compromise a machine inside the network. This would be nothing new, I remember ages ago in the days of WEP that you could buy a small box that would collect…

or just do some fun hacking that doesn't have you at the location of the hack

Re: The Nearest Neighbor Attack

#19

Post by akaiser »

_nalply wrote: post #4
kmeisthax wrote: post #2

So, as I understand it, you 0wn a machine in one organization, then use it to tunnel over to Wi-Fi in the building next door, 0wn another machine there, rinse and repeat until you've created the world's least consensual mesh network?

They are exploiting that Wifi didn't have 2fa, because they couldn't overcome 2fa. A company accross the street had a machine that both was accessible by ethernet and wifi and they used that as a bridge. Conclusions: 1. Anything that doesn't have 2fa is leaking like a sieve. 2. The targeted company needs to implement 2fa for their Wifi as well. Not mentioned, but I assume that their 2fa is using specialised hardware…

Eludes me why they didn't have device-certificate-based auth for their Enterprise WiFi in addition to the username+password. Basically comes for free with AD and NPS.

Re: The Nearest Neighbor Attack

#20

Post by [deleted] »

Rygian wrote: post #11

> Volexity now determined the attacker was connecting to the network via wireless credentials they had brute-forced from an Internet-facing service. However, it was not clear where the attacker was physically that allowed them to connect to the Enterprise Wi-Fi to begin with. Further analysis of data available from Organization A’s wireless controller showed which specific wireless access points the attacker was conn…

[deleted]
Post reply on HN