Internal Attacker Detected: Part 2

Two days later, I walked up to the well organized desk of Tim, the malware tech that told me about the hacking tools that he’d found on a contractor’s PC.

“Tim, did you find any bear paw in the trap we set?”

This is a multi-part series. See Internal Attacker Detected: Part 1.

Tim turned around, and I could immediately tell he was not happy. His jaw was tight, his hair was clumped, and his blurry eyes told that he had not been to bed in the past 24 hours.

Tim took a deep breath and brought his emotions back to center. “No, I didn’t, Mack. Sorry, but I haven’t even had a chance to check the trap. I’ve been battling that outbreak that occurred yesterday. I h-a-t-e salespeople. They never seem to use their laptops to sell product, just to surf the web when they’re lonely. The trash they pick up.”

My brow wrinkled as a frown fell across my face. “You have my sympathy, Tim. Hang in there. Next month at the annual sales meeting, I’ve giving a security awareness refresher for them. They slotted me for an hour.”

Tim held his right hand up like a policeman stopping traffic. “Just keep them away from me.”

“No problem,” I said. “I’ll let you know how it goes. They usually ask a lot of good questions–speaking of questions, when do you expect to be able to follow up on our troubled friend? I have a bad feeling about this incident.”

“Tomorrow. I’ll try to call you by 10 am, okay?” Tim turned around and started typing. He really wanted me to go away.

So away I went.

The next day, I was looking at the clock on my office wall when the phone rang. It was 9:55 am. That has to be Tim, because he’s never late, and he always delivers.

“Mack here,” I answered as I peered out my window, watching the catalpa trees sway forth and back.

“Hey, we caught some bear, Mack,” Tim said with excitement. “It’s showtime!”

Read Internal Attacker Detected: Part 3

2 Comments

Filed under Case Files, Security, Security Scout

2 responses to “Internal Attacker Detected: Part 2

  1. Come on, three parts is enough :)

    Like

Leave a Comment

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s