The IT-Days 2019, an event organized by “Together AG” to connect IT companies with potential new recruits, took place in “Welle 7” at Bern’s train station. The Swiss Federal Personnel Office took part and asked me to conduct a workshop.
A group of 10 students of several disciplines of IT experienced an attack with reconnaissance through OSINT methods, weaponization of a Microsoft Office document and delivery through faked e-mail. They then got a taste of what’s possible in the command & control phase, i.e. complete control of the victims computer including exfiltration of saved passwords and takeover of other accounts.
