The Ethical Hacker Network - Robber Uses Craigslist to Pull Off Bank Heist

Latest Additions

Who's Online

EH-Net > Ethical Hacking Discussions and Related Certifications > Social Engineering (Moderator: don) > Robber Uses Craigslist to Pull Off Bank Heist

Pages: [1] Go Down

« previous next »

	Author	Topic: Robber Uses Craigslist to Pull Off Bank Heist (Read 22354 times)
0 Members and 1 Guest are viewing this topic.

don

Editor-In-Chief
Administrator
Hero Member

Offline

Posts: 4167

Editor-In-Chief

Robber Uses Craigslist to Pull Off Bank Heist

« on: March 19, 2009, 10:07:18 AM »

I hadn't heard of this story until a classmate mentioned it at SANS 2009. Thought I'd share it with you as another example of electronically assisted social engineering. Basically, he placed a false ad on Craigslist to create a crowd around a bank truck to make himself less visible. Get the low-tech details at either of these 2 links:

http://arstechnica.com/old/content/2008/10/bank-robber-crowdsources-disguise-to-craigslist-floats-away.ars

http://news.cnet.com/bank-robber-hires-decoys-on-craigslist-fools-cops/

Don


« Last Edit: March 19, 2009, 10:09:45 AM by don »	Logged

CISSP, MCSE, CSTA, Security+ SME

timmedin

Sr. Member

Offline

Posts: 469

Re: Robber Uses Craigslist to Pull Off Bank Heist

« Reply #1 on: March 19, 2009, 11:19:31 AM »

I laughed out loud when I first read this story. A real life blue colar Thomas Crown affair.

I hadn't heard the part about the "getaway inner tube" though. Classic!


	Logged

twitter.com/timmedin | http://blog.securitywhole.com

mmurray

Newbie

Offline

Posts: 17

Re: Robber Uses Craigslist to Pull Off Bank Heist

« Reply #2 on: March 19, 2009, 01:24:24 PM »

This is why I always make the argument that SE attacks are really attacks of the imagination - this is the kind of thing that makes SE very difficult to defend against. Predictable controls are easily circumvented by an unpredictable attacker.


	Logged

--
Mike Murray
MAD Security / The Hacker Academy

Email - mmurray@thehackeracademy.com
Phone - 773-360-0658
Twitter: http://www.twitter.com/mmurray

LSOChris

Guest

Re: Robber Uses Craigslist to Pull Off Bank Heist

« Reply #3 on: March 19, 2009, 01:30:31 PM »

very well put Mike!


	Logged

jason

Hero Member

Offline

Posts: 1012

Re: Robber Uses Craigslist to Pull Off Bank Heist

« Reply #4 on: March 19, 2009, 08:04:30 PM »

Ya, I remember reading about this one a bit back. Very slick solution Cool


	Logged

former33t

Full Member

Offline

Posts: 226

Re: Robber Uses Craigslist to Pull Off Bank Heist

« Reply #5 on: March 19, 2009, 08:56:27 PM »

I hadn't heard of that, but it reminds me a lot of the movie Inside Man where most of the robbers in a bank heist get away by dressing everyone (including themselves) in painters' uniforms and masks and running out of the building with all the hostages. This didn't even require hostages, just a lot of unemployment and some people willing to believe they would make $28/hr for manual labor...