undefined | Better HN

0 pointsoh_sigh7y ago0 comments

Bribe a guard, install a hardware keylogger on random workstation, steal corporate login password, and go from there.

0 comments

2 comments · 1 top-level

tony1017y ago· 1 in thread

And grab any U2F security keys in sight.

A missing U2F key might trigger an audit which could lead to discovery of the keylogger. Better bet would be to get the passwords, and then come back and register a second U2F key to the victims account.

j / k navigate · click thread line to collapse