Tuesday, December 18, 2018

Pen Testing - Social Enginnering

Hello Networking, It is my first year at this company so this is the first time that I have went through our annual penetration testing process. Now, it has only came to my attention that this was going on since they started an internal audit of our network. They have been doing external pen testing the weeks prior. Which lead me recall an odd experience I had a couple of weeks ago. One sunday afternoon I was watching football at my local townie/dive bar. When a guy sparked up a conversation with me about computer networking. It started as a conversation about cell phone towers but after discovering I worked in IT he quickly escalated the conversation towards computer security. Gladly I didnt give up much information other then what industry I worked in and that I work in computer networking. After I kindly ended the conversation saying that I just wanted to watch the end of the football game he left pretty immediately. Am I just reading to much into this or is it possible that this was a part of the pen testing? Has anyone heard of of pen testers doing this type of thing? The dude said he was a contractor for the NSA working at a military base near by that sounded like BS and this bar isnt a place that I wouldnt think attracted out of state IT contractors. Anywho, curious to hear your thoughts.



No comments:

Post a Comment