Pen tester says tobacco firm left recipes on an open file share
Original title: Tobacco company got smoked by leaving secret recipes on a file share
The share allowed anonymous SMB access to every employee; the company denied the recipes were real, then the files disappeared.
Red teamer Dahvid Schloss told The Register that a tobacco-company engagement found an unrestricted Windows file share hosting confidential product recipes. Ports 139 and 445 were open, Trend Micro did not alert during loud scanning, and any employee could open files marked confidential that listed chemical weights and percentages. He deleted his copy on his manager’s orders. The client denied the files were real for about a year; by the end of the engagement they were gone.
Unconfirmed: The company denied the recipes were real; only the tester’s account and the later disappearance of the files are reported.
- Schloss found the share after searching for unauthenticated or anonymous access.
- The folder was named confidential and sat with IT and HR records.
- Nmap showed SMB ports 139 and 445 open.
- He could not later prove the file because he had erased his copy.
- The company is not named in the account.
Impact: Product recipes exposed to every employee on an open share
- Vendors
- Trend Micro
- Products
- MetasploitNmap
From the original article
3 min read at theregister.comWelcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product having a supremely unhealthy security posture. Our tale of terrible data management, once again, comes courtesy of professional pen tester and red teamer Dahvid Schloss.
By Avram Piltch · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.